CVSS: 7.8EPSS: 0%CPEs: 53EXPL: 0CVE-2011-0941
https://notcve.org/view.php?id=CVE-2011-0941
01 Nov 2011 — Memory leak in Cisco Unified Communications Manager (CUCM) 6.x before 6.1(5)su2, 7.x before 7.1(5b)su3, 8.x before 8.0(3a)su1, and 8.5 before 8.5(1), and Cisco IOS 12.4 and 15.1, allows remote attackers to cause a denial of service (memory consumption and process failure or device reload) via a malformed SIP message, aka Bug IDs CSCti75128 and CSCtj09179. Pérdida de memoria en versión del Unified Communications Manager (CUCM) de Cisco versiones 6.x anteriores a 6.1(5)su2, versiones 7.x anteriores a 7.1(5b)s... • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20110928-cucm • CWE-399: Resource Management Errors •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2011-1640
https://notcve.org/view.php?id=CVE-2011-1640
22 Oct 2011 — The ethernet-lldp component in Cisco IOS 12.2 before 12.2(33)SXJ1 does not properly support a large number of LLDP Management Address (MA) TLVs, which allows remote attackers to cause a denial of service (device crash) via crafted LLDPDUs, aka Bug ID CSCtj22354. El componente ethernet-LLDP en Cisco IOS v12.2 anterior a v12.2(33)SXJ1 no soporta de forma adecuada un gran número de LLDP Management Address (MA) TLVs, lo que permita a atacantes remotos a provocar una denegación de servicio (caída del dispositivo... • http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SX/release/notes/caveats_SXJ.html • CWE-400: Uncontrolled Resource Consumption •
CVSS: 7.5EPSS: 1%CPEs: 1EXPL: 0CVE-2011-2057
https://notcve.org/view.php?id=CVE-2011-2057
22 Oct 2011 — The cat6000-dot1x component in Cisco IOS 12.2 before 12.2(33)SXI7 does not properly handle (1) a loop between a dot1x enabled port and an open-authentication dot1x enabled port and (2) a loop between a dot1x enabled port and a non-dot1x port, which allows remote attackers to cause a denial of service (traffic storm) via unspecified vectors that trigger many Spanning Tree Protocol (STP) Bridge Protocol Data Unit (BPDU) frames, aka Bug ID CSCtq36327. El componente cat6000-dot1x en Cisco IOS v12.2 anterior a v... • http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SX/release/notes/caveats_SXI_rebuilds.html • CWE-20: Improper Input Validation •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2011-2058
https://notcve.org/view.php?id=CVE-2011-2058
22 Oct 2011 — The cat6000-dot1x component in Cisco IOS 12.2 before 12.2(33)SXI7 does not properly handle an external loop between a pair of dot1x enabled ports, which allows remote attackers to cause a denial of service (traffic storm) via unspecified vectors that trigger many unicast EAPoL Protocol Data Units (PDUs), aka Bug ID CSCtq36336. El componente cat6000-dot1x en Cisco IOS v12.2 anterior a v12.2(33)SXI7 no controla correctamente un bucle externo entre un par de puertos dot1x habilitados, lo que permite a atacante... • http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SX/release/notes/caveats_SXI_rebuilds.html • CWE-20: Improper Input Validation •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2011-2059
https://notcve.org/view.php?id=CVE-2011-2059
22 Oct 2011 — The ipv6 component in Cisco IOS before 15.1(4)M1.3 allows remote attackers to conduct fingerprinting attacks and obtain potentially sensitive information about the presence of the IOS operating system via an ICMPv6 Echo Request packet containing a Hop-by-Hop (HBH) extension header (EH) with a 0x0c01050c value in the PadN option data, aka Bug ID CSCtq02219. El componente IPv6 en Cisco IOS anterior a v15.1(4)M1.3 permite a atacantes remotos a realizar ataques para la obtención de datos del servidor (fingerpri... • http://blogs.cisco.com/security/1999tcp-redux-the-ipv6-flavor • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 7.8EPSS: 0%CPEs: 17EXPL: 0CVE-2011-0939
https://notcve.org/view.php?id=CVE-2011-0939
03 Oct 2011 — Unspecified vulnerability in Cisco IOS 12.4, 15.0, and 15.1, and IOS XE 2.5.x through 3.2.x, allows remote attackers to cause a denial of service (device reload) via a crafted SIP message, aka Bug ID CSCth03022. Vulnerabilidad no especificada en Cisco IOS v12.4, v15.0 y v15.1, y en Cisco IOS XE v2.5.x a 3.2.x, permite a atacantes remotos causar una denegación de servicio (reinicio del dispositivo) a través de un mensaje SIP debidamente modificado. Problema también conocido como Bug ID CSCth03022. • http://tools.cisco.com/security/center/viewAlert.x?alertId=24127 •
CVSS: 7.8EPSS: 0%CPEs: 3EXPL: 0CVE-2011-0944
https://notcve.org/view.php?id=CVE-2011-0944
03 Oct 2011 — Cisco IOS 12.4, 15.0, and 15.1 allows remote attackers to cause a denial of service (device reload) via malformed IPv6 packets, aka Bug ID CSCtj41194. Cisco IOS v12.4, v15.0 y v15.1 permiten a atacantes remotos causar una denegación de servicio (reinicio del dispositivo) a través de paquetes IPv6 mal formados. Problema también conocido como Bug ID CSCtj41194. • http://tools.cisco.com/security/center/viewAlert.x?alertId=24131 • CWE-399: Resource Management Errors •
CVSS: 7.8EPSS: 0%CPEs: 195EXPL: 0CVE-2011-0945
https://notcve.org/view.php?id=CVE-2011-0945
03 Oct 2011 — Memory leak in the Data-link switching (aka DLSw) feature in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1, and IOS XE 3.1.xS before 3.1.3S and 3.2.xS before 3.2.1S, when implemented over Fast Sequence Transport (FST), allows remote attackers to cause a denial of service (memory consumption and device reload or hang) via a crafted IP protocol 91 packet, aka Bug ID CSCth69364. Pérdida de memoria en la funcionalidad de conmutación Data-Link(alias DLSw) en Cisco IOS v12.1 a v12.4 y v15.0 a v15.1, y en Cisc... • http://tools.cisco.com/security/center/viewAlert.x?alertId=24116 • CWE-399: Resource Management Errors •
CVSS: 7.8EPSS: 0%CPEs: 4EXPL: 0CVE-2011-0946
https://notcve.org/view.php?id=CVE-2011-0946
03 Oct 2011 — The NAT implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1, and IOS XE 3.1.xSG, allows remote attackers to cause a denial of service (device reload or hang) via malformed NetMeeting Directory (aka Internet Locator Service or ILS) LDAP traffic, aka Bug ID CSCtd10712. La implementación de NAT en Cisco IOS v12.1 a v12.4 y v15.0 a v15.1, y en Cisco IOS XE v3.1.xSG, permite a atacantes remotos causar una denegación de servicio (reinicio o bloqueo del dispositivo) a través de tráfico LDAP mal for... • http://tools.cisco.com/security/center/viewAlert.x?alertId=24117 •
CVSS: 7.8EPSS: 0%CPEs: 74EXPL: 0CVE-2011-2072
https://notcve.org/view.php?id=CVE-2011-2072
03 Oct 2011 — Memory leak in Cisco IOS 12.4, 15.0, and 15.1, Cisco IOS XE 2.5.x through 3.2.x, and Cisco Unified Communications Manager (CUCM) 6.x and 7.x before 7.1(5b)su4, 8.x before 8.5(1)su2, and 8.6 before 8.6(1) allows remote attackers to cause a denial of service (memory consumption and device reload or process failure) via a malformed SIP message, aka Bug IDs CSCtl86047 and CSCto88686. Una vulnerabilidad de pérdida de memoria en Cisco IOS v12.4, v15.0 y v15.1, Cisco IOS XE v2.5.x hasta v3.2.x, y Cisco Unified Com... • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20110928-cucm • CWE-399: Resource Management Errors •