![](/assets/img/cve_300x82_sin_bg.png)
CVE-2013-5503
https://notcve.org/view.php?id=CVE-2013-5503
02 Oct 2013 — The UDP process in Cisco IOS XR 4.3.1 does not free packet memory upon detecting full packet queues, which allows remote attackers to cause a denial of service (memory consumption) via UDP packets to listening ports, aka Bug ID CSCue69413. El proceso UDP en Cisco IOS XR 4.3.1 no libera la memoria de los paquetes hasta detectar las colas de los paquetes completas, lo que permite a atacantes remotos causar una denegación de servicio (consumo de memoria) a través de paquetes UDP hacia los puertos de escucha, a... • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131002-iosxr • CWE-399: Resource Management Errors •
![](/assets/img/cve_300x82_sin_bg.png)
CVE-2013-3464
https://notcve.org/view.php?id=CVE-2013-3464
12 Aug 2013 — Cisco IOS XR allows local users to cause a denial of service (Silicon Packet Processor memory corruption, improper mutex handling, and device reload) by starting an outbound flood of large ICMP Echo Request packets and stopping this with a CTRL-C sequence, aka Bug ID CSCui60347. Cisco IOS XR permite a usuarios locales provocar una denegación de servicio (corrupción memoria en Silicon Packet Processor, manipulación indebida mutex, y recarga del dispositivo) iniciando una inundación a través del envío de gran... • http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3464 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
![](/assets/img/cve_300x82_sin_bg.png)
CVE-2012-4617
https://notcve.org/view.php?id=CVE-2012-4617
27 Sep 2012 — The BGP implementation in Cisco IOS 15.2, IOS XE 3.5.xS before 3.5.2S, and IOS XR 4.1.0 through 4.2.2 allows remote attackers to cause a denial of service (multiple connection resets) by leveraging a peer relationship and sending a malformed attribute, aka Bug IDs CSCtt35379, CSCty58300, CSCtz63248, and CSCtz62914. La implementación de BGP en Cisco IOS v15.2, IOS XE v3.5.xS anteriores a v3.5.2S, e IOS XR v4.1.0 hasta la v4.2.2 permite a atacantes remotos provocar una denegación de servicio (reseteo de múlti... • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120926-bgp • CWE-20: Improper Input Validation •
![](/assets/img/cve_300x82_sin_bg.png)
CVE-2012-2488
https://notcve.org/view.php?id=CVE-2012-2488
31 May 2012 — Cisco IOS XR before 4.2.1 on ASR 9000 series devices and CRS series devices allows remote attackers to cause a denial of service (packet transmission outage) via a crafted packet, aka Bug IDs CSCty94537 and CSCtz62593. Cisco IOS XR anteriores a v4.2.1 en dispositivos ASR series 900 y dispositivos CRS, permite a atacantes remotos provocar una denegación de servicio (transmisión de paquetes cortados) a través de un paquete manipulado, también conocido como Bug IDs CSCty94537 y CSCtz62593. • http://secunia.com/advisories/49329 • CWE-20: Improper Input Validation •
![](/assets/img/cve_300x82_sin_bg.png)
CVE-2011-3295
https://notcve.org/view.php?id=CVE-2011-3295
02 May 2012 — The NETIO and IPV4_IO processes in Cisco IOS XR 3.8 through 4.1, as used in Cisco Carrier Routing System and other products, allow remote attackers to cause a denial of service (CPU consumption) via crafted network traffic, aka Bug ID CSCti59888. Los procesos NETIO y IPV4_IO en Cisco IOS XR v3.8 hasta v4.1, como los utilizados en el sistema Cisco Carrier Routing System y otros productos, permite a atacantes remotos causar una denegación de servicio (consumo de CPU) a través de tráfico de la red manipulado, ... • http://www-europe.cisco.com/cisco/software/release.html?mdfid=279879106&reltype=all&relind=AVAILABLE&release=3.9.2&softwareid=280867577&sortparam=7 • CWE-20: Improper Input Validation •
![](/assets/img/cve_300x82_sin_bg.png)
CVE-2011-2549
https://notcve.org/view.php?id=CVE-2011-2549
28 Jul 2011 — Unspecified vulnerability in Cisco IOS XR 4.1.x before 4.1.1 on Cisco Aggregation Services Routers (ASR) 9000 series devices allows remote attackers to cause a denial of service (line-card reload) via an IPv4 packet, aka Bug ID CSCtr26695. Vulnerabilidad no especificada en Cisco IOS XR v4.1.x antes de v4.1.1 en dispositivos Cisco Aggregation Services Routers (ASR) de la serie 9000, permite a atacantes remotos causar una denegación de servicio (recarga line-card) a través de un paquete IPv4, también conocido... • http://secunia.com/advisories/45333 •
![](/assets/img/cve_300x82_sin_bg.png)
CVE-2011-1651
https://notcve.org/view.php?id=CVE-2011-1651
31 May 2011 — Cisco IOS XR 3.9.x and 4.0.x before 4.0.3 and 4.1.x before 4.1.1, when an SPA interface processor is installed, allows remote attackers to cause a denial of service (device reload) via a crafted IPv4 packet, aka Bug ID CSCto45095. Cisco IOS XR 3.9.x y 4.0.x anteriores a 4.0.3 y 4.1.x anteriores a 4.1.1, si el procesador de interfaz SPA está instalado, permite a atacantes remotos provocar una denegación de servicio (recarga del dispositivo) a través de un paquete IPv4 modificado. También conocido como Bug ID... • http://www.cisco.com/en/US/products/products_security_advisory09186a0080b7f191.shtml • CWE-399: Resource Management Errors •
![](/assets/img/cve_300x82_sin_bg.png)
CVE-2011-0949
https://notcve.org/view.php?id=CVE-2011-0949
31 May 2011 — Cisco IOS XR 3.6.x, 3.8.x before 3.8.3, and 3.9.x before 3.9.1 does not properly remove sshd_lock files from /tmp/, which allows remote attackers to cause a denial of service (disk consumption) by making many SSHv1 connections, aka Bug ID CSCtd64417. Cisco IOS XR v3.6.x, v3.8.x antes de v3.8.3, y v3.9.x antes de v3.9.1 no elimina correctamente los archivos sshd_lock /tmp/, lo que permite a atacantes remotos provocar una denegación de servicio (consumo de disco) mediante muchas conexiones SSHv1, fallo conoci... • http://www.cisco.com/en/US/products/products_security_advisory09186a0080b7f18f.shtml • CWE-399: Resource Management Errors •
![](/assets/img/cve_300x82_sin_bg.png)
CVE-2011-0943
https://notcve.org/view.php?id=CVE-2011-0943
31 May 2011 — Cisco IOS XR 3.8.3, 3.8.4, and 3.9.1 allows remote attackers to cause a denial of service (NetIO process restart or device reload) via a crafted IPv4 packet, aka Bug ID CSCth44147. Cisco IOS XR v3.8.3, v3.8.4 y v3.9.1 permite a atacantes remotos provocar una denegación de servicio (reinicio del proceso NetIO o recarga del dispositivo) a través de un paquete IPv4 manipulado, también conocido como error ID CSCth44147. • http://www.cisco.com/en/US/products/products_security_advisory09186a0080b7f18e.shtml • CWE-399: Resource Management Errors •
![](/assets/img/cve_300x82_sin_bg.png)
CVE-2010-3035 – Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability
https://notcve.org/view.php?id=CVE-2010-3035
30 Aug 2010 — Cisco IOS XR 3.4.0 through 3.9.1, when BGP is enabled, does not properly handle unrecognized transitive attributes, which allows remote attackers to cause a denial of service (peering reset) via a crafted prefix announcement, as demonstrated in the wild in August 2010 with attribute type code 99, aka Bug ID CSCti62211. Cisco IOS XR v3.4.0 hasta la versión v3.9.1, si BGP está activado, no maneja apropiadamente los atributos transitivos no reconocidos, lo que permite a atacantes remotos provocar una denegació... • http://mailman.nanog.org/pipermail/nanog/2010-August/024837.html • CWE-20: Improper Input Validation •