Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cisco ios xr 3.4 vulnerabilities and exploits

(subscribe to this query)
4.6
CVSSv2
CVE-2013-3464
Cisco IOS XR allows local users to cause a denial of service (Silicon Packet Processor memory corruption, improper mutex handling, and device reload) by starting an outbound flood of large ICMP Echo Request packets and stopping this with a CTRL-C sequence, aka Bug ID CSCui60347.
Cisco Ios Xr 3.2\\(.1\\)Cisco Ios Xr 3.2\\(.2\\)Cisco Ios Xr 3.3\\(.2\\)Cisco Ios Xr 3.3\\(.3\\)Cisco Ios Xr 3.5\\(.1\\)Cisco Ios Xr 3.5\\(.2\\)Cisco Ios Xr 3.5\\(.3\\)Cisco Ios Xr 3.0\\(.1\\)Cisco Ios Xr 3.2\\(.0\\)Cisco Ios Xr 3.3\\(.0\\)Cisco Ios Xr 3.3\\(.1\\)Cisco Ios Xr 3.4\\(.3\\)Cisco Ios Xr 3.5\\(.0\\)Cisco Ios Xr 3.6\\(.3\\)Cisco Ios Xr 3.7 BaseCisco Ios Xr 3.8\\(.3\\)Cisco Ios Xr 3.8\\(.4\\)Cisco Ios Xr 4.0\\(.2\\)Cisco Ios Xr 4.0\\(.3\\)Cisco Ios Xr 4.0\\(.4\\)Cisco Ios Xr 4.2\\(.1\\)Cisco Ios Xr 4.2\\(.2\\)
5
CVSSv2
CVE-2007-4430
Unspecified vulnerability in Cisco IOS 12.0 up to and including 12.4 allows context-dependent malicious users to cause a denial of service (device restart and BGP routing table rebuild) via certain regular expressions in a "show ip bgp regexp" command. NOTE: unauthentic...
Cisco CliCisco Ios 10.0Cisco Ios 11.0Cisco Ios 12.4Cisco Ios Xr 2.0Cisco Ios 11.2Cisco Ios 12.0Cisco Ios 12.1Cisco Ios 12.2Cisco CbosCisco Cbos 12.1Cisco Cbos 12.2Cisco IdsCisco Ios Xr 3.1Cisco Ios Xr 3.2Cisco Ios Xr 3.3Cisco Ios Xr 3.4Cisco Ios 10.3Cisco Ios 11.1Cisco Ios 12.3Cisco Ios XrCisco Ios Xr 3.0
5
CVSSv2
CVE-2014-3376
Cisco IOS XR 5.1 and previous versions allows remote malicious users to cause a denial of service (process reload) via a malformed RSVP packet, aka Bug ID CSCuq12031.
Cisco Ios Xr 4.1.2Cisco Ios Xr 4.1.1Cisco Ios Xr 3.9.2Cisco Ios Xr 3.9.1Cisco Ios Xr 3.7.3Cisco Ios Xr 3.7.2Cisco Ios Xr 3.5.3Cisco Ios Xr 3.5.2Cisco Ios Xr 3.3.5Cisco Ios Xr 3.3.4Cisco Ios Xr 3.2.2Cisco Ios Xr 5.1.0Cisco Ios Xr 4.1Cisco Ios Xr 4.0.4Cisco Ios Xr 3.9.0Cisco Ios Xr 3.8.4Cisco Ios Xr 3.7.1Cisco Ios Xr 3.7Cisco Ios Xr 3.5.1Cisco Ios Xr 3.5Cisco Ios Xr 3.3.3Cisco Ios Xr 3.3.2
4
CVSSv2
CVE-2014-3377
snmpd in Cisco IOS XR 5.1 and previous versions allows remote authenticated users to cause a denial of service (process reload) via a malformed SNMPv2 packet, aka Bug ID CSCun67791.
Cisco Ios Xr 4.3.1Cisco Ios Xr 4.3.0Cisco Ios Xr 4.0.2Cisco Ios Xr 4.0.1Cisco Ios Xr 3.8.1Cisco Ios Xr 3.8.0Cisco Ios Xr 3.6.1Cisco Ios Xr 3.6Cisco Ios Xr 3.4.2Cisco Ios Xr 3.4.1Cisco Ios Xr 3.4Cisco Ios Xr 3.2.50Cisco Ios Xr 3.2.4Cisco Ios Xr 3.0Cisco Ios Xr 2.0Cisco Ios Xr 4.2.0Cisco Ios Xr 4.1.2Cisco Ios Xr 4.0.0Cisco Ios Xr 3.9.2Cisco Ios Xr 3.9.1Cisco Ios Xr 3.7.3Cisco Ios Xr 3.7.2
5
CVSSv2
CVE-2014-3378
tacacsd in Cisco IOS XR 5.1 and previous versions allows remote malicious users to cause a denial of service (process reload) via a malformed TACACS+ packet, aka Bug ID CSCum00468.
Cisco Ios Xr 4.2.0Cisco Ios Xr 4.1.2Cisco Ios Xr 4.0.0Cisco Ios Xr 3.9.2Cisco Ios Xr 3.8.0Cisco Ios Xr 3.7.3Cisco Ios Xr 3.7.2Cisco Ios Xr 3.5.4Cisco Ios Xr 3.5.3Cisco Ios Xr 4.3.4Cisco Ios Xr 4.3.2Cisco Ios Xr 4.0.4Cisco Ios Xr 4.0.3Cisco Ios Xr 3.8.4Cisco Ios Xr 3.8.3Cisco Ios Xr 3.6.3Cisco Ios Xr 3.6.2Cisco Ios Xr 3.5Cisco Ios Xr 3.4.3Cisco Ios Xr 3.3.2Cisco Ios Xr 3.3.1Cisco Ios Xr 3.1
3.3
CVSSv2
CVE-2009-2056
Cisco IOS XR 3.8.1 and previous versions allows remote authenticated users to cause a denial of service (process crash) via vectors involving a BGP UPDATE message with many AS numbers prepended to the AS path.
Cisco Ios Xr 3.6.1Cisco Ios Xr 3.6.0Cisco Ios Xr 3.6Cisco Ios Xr 3.5Cisco Ios Xr 3.2.2Cisco Ios Xr 3.2.1Cisco Ios Xr 3.2Cisco Ios Xr 3.1Cisco Ios Xr 3.7.2Cisco Ios Xr 3.6.3Cisco Ios Xr 3.5.3Cisco Ios Xr 3.4Cisco Ios Xr 3.2.4Cisco Ios Xr 3.2.3Cisco Ios Xr 3.1.0Cisco Ios Xr 3.0.1Cisco Ios Xr 3.8.0Cisco Ios Xr 3.7Cisco Ios Xr 3.7.0Cisco Ios Xr 3.7.1Cisco Ios Xr 3.4.0Cisco Ios Xr 3.4.1
4.3
CVSSv2
CVE-2009-2055
Cisco IOS XR 3.4.0 up to and including 3.8.1 allows remote malicious users to cause a denial of service (session reset) via a BGP UPDATE message with an invalid attribute, as demonstrated in the wild on 17 August 2009.
Cisco Ios Xr 3.4Cisco Ios Xr 3.4.0Cisco Ios Xr 3.4.1Cisco Ios Xr 3.7.3Cisco Ios Xr 3.8.1Cisco Ios Xr 3.8.0Cisco Ios Xr 3.4.3Cisco Ios Xr 3.5.3Cisco Ios Xr 3.6.2Cisco Ios Xr 3.7.0Cisco Ios Xr 3.7.2Cisco Ios Xr 3.5.2Cisco Ios Xr 3.5.4Cisco Ios Xr 3.6.0Cisco Ios Xr 3.6.1Cisco Ios Xr 3.4.2Cisco Ios Xr 3.5Cisco Ios Xr 3.6.3Cisco Ios Xr 3.7.1
3.3
CVSSv2
CVE-2009-1154
Cisco IOS XR 3.8.1 and previous versions allows remote malicious users to cause a denial of service (process crash) via a long BGP UPDATE message, as demonstrated by a message with many AS numbers in the AS Path Attribute.
Cisco Ios Xr 3.5Cisco Ios Xr 3.5.3Cisco Ios Xr 3.5.2Cisco Ios Xr 3.5.4Cisco Ios Xr 3.6.0Cisco Ios Xr 3.4.0Cisco Ios Xr 3.4.2Cisco Ios Xr 3.6.2Cisco Ios Xr 3.7.0Cisco Ios Xr 3.4Cisco Ios Xr 3.7.2Cisco Ios Xr 3.7.3Cisco Ios Xr 3.8.0Cisco Ios XrCisco Ios Xr 3.4.1Cisco Ios Xr 3.4.3Cisco Ios Xr 3.6.3Cisco Ios Xr 3.7.1Cisco Ios Xr 3.6.1
7.8
CVSSv2
CVE-2012-0381
The IKEv1 implementation in Cisco IOS 12.2 up to and including 12.4 and 15.0 up to and including 15.2 and IOS XE 2.1.x up to and including 2.6.x and 3.1.xS up to and including 3.4.xS prior to 3.4.2S, 3.5.xS prior to 3.5.1S, and 3.2.xSG prior to 3.2.2SG allows remote malicious use...
Cisco Ios 12.0Cisco Ios 12.2Cisco Ios 12.2\\(1\\)Cisco Ios 12.2\\(1\\)dxCisco Ios 12.2\\(1\\)sCisco Ios 12.2\\(1\\)tCisco Ios 12.2\\(1\\)xaCisco Ios 12.2\\(1\\)xdCisco Ios 12.2\\(1\\)xd1Cisco Ios 12.2\\(1\\)xd3Cisco Ios 12.2\\(1\\)xd4Cisco Ios 12.2\\(1\\)xeCisco Ios 12.2\\(1\\)xe2Cisco Ios 12.2\\(1\\)xe3Cisco Ios 12.2\\(1\\)xhCisco Ios 12.2\\(1\\)xqCisco Ios 12.2\\(1\\)xsCisco Ios 12.2\\(1\\)xs1Cisco Ios 12.2\\(1.1\\)Cisco Ios 12.2\\(1.1\\)piCisco Ios 12.2\\(1.4\\)sCisco Ios 12.2\\(1b\\)
7.8
CVSSv2
CVE-2012-0382
The Multicast Source Discovery Protocol (MSDP) implementation in Cisco IOS 12.0, 12.2 up to and including 12.4, and 15.0 up to and including 15.2 and IOS XE 2.1.x up to and including 2.6.x and 3.1.xS up to and including 3.4.xS prior to 3.4.1S and 3.1.xSG and 3.2.xSG prior to 3.2....
Cisco Ios 12.0Cisco Ios 12.2Cisco Ios 12.2\\(1\\)Cisco Ios 12.2\\(1\\)dxCisco Ios 12.2\\(1\\)sCisco Ios 12.2\\(1\\)tCisco Ios 12.2\\(1\\)xaCisco Ios 12.2\\(1\\)xdCisco Ios 12.2\\(1\\)xd1Cisco Ios 12.2\\(1\\)xd3Cisco Ios 12.2\\(1\\)xd4Cisco Ios 12.2\\(1\\)xeCisco Ios 12.2\\(1\\)xe2Cisco Ios 12.2\\(1\\)xe3Cisco Ios 12.2\\(1\\)xhCisco Ios 12.2\\(1\\)xqCisco Ios 12.2\\(1\\)xsCisco Ios 12.2\\(1\\)xs1Cisco Ios 12.2\\(1.1\\)Cisco Ios 12.2\\(1.1\\)piCisco Ios 12.2\\(1.4\\)sCisco Ios 12.2\\(1b\\)
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook