Product:

Ios_xe

(Cisco)
Repositories

Unknown:

This might be proprietary software.

#Vulnerabilities 519
Date Id Summary Products Score Patch Annotated
2016-10-27 CVE-2016-6438 A vulnerability in Cisco IOS XE Software running on Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated, remote attacker to cause a configuration integrity change to the vty line configuration on an affected device. This vulnerability affects the following releases of Cisco IOS XE Software running on Cisco cBR-8 Converged Broadband Routers: All 3.16S releases, All 3.17S releases, Release 3.18.0S, Release 3.18.1S, Release 3.18.0SP. More Information: CSCuz62815. Known... Ios_xe 5.9
2016-10-05 CVE-2016-6392 Cisco IOS 12.2 and 15.0 through 15.3 and IOS XE 3.1 through 3.9 allow remote attackers to cause a denial of service (device restart) via a crafted IPv4 Multicast Source Discovery Protocol (MSDP) Source-Active (SA) message, aka Bug ID CSCud36767. Ios, Ios_xe 7.5
2016-10-05 CVE-2016-6386 Cisco IOS XE 3.1 through 3.17 and 16.1 on 64-bit platforms allows remote attackers to cause a denial of service (data-structure corruption and device reload) via fragmented IPv4 packets, aka Bug ID CSCux66005. Ios_xe, Ios_xe_16\.1, Ios_xe_3\.1sg, Ios_xe_3\.2ja, Ios_xe_3\.2sg, Ios_xe_3\.2xo, Ios_xe_3\.3sg, Ios_xe_3\.3sq, Ios_xe_3\.3xo, Ios_xe_3\.4sg, Ios_xe_3\.4sq, Ios_xe_3\.5sq, Ios_xe_3\.8ex 7.5
2016-10-05 CVE-2016-6385 Memory leak in the Smart Install client implementation in Cisco IOS 12.2 and 15.0 through 15.2 and IOS XE 3.2 through 3.8 allows remote attackers to cause a denial of service (memory consumption) via crafted image-list parameters, aka Bug ID CSCuy82367. Ios, Ios_xe 7.5
2016-10-05 CVE-2016-6382 Cisco IOS 15.2 through 15.6 and IOS XE 3.6 through 3.17 and 16.1 allow remote attackers to cause a denial of service (device restart) via a malformed IPv6 Protocol Independent Multicast (PIM) register packet, aka Bug ID CSCuy16399. Ios, Ios_xe 7.5
2016-10-05 CVE-2016-6381 Cisco IOS 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.18 and 16.1 allow remote attackers to cause a denial of service (memory consumption or device reload) via fragmented IKEv1 packets, aka Bug ID CSCuy47382. Ios, Ios_xe, Ios_xe_16\.1, Ios_xe_3\.3sg, Ios_xe_3\.3xo, Ios_xe_3\.4sg 7.5
2016-10-05 CVE-2016-6380 The DNS forwarder in Cisco IOS 12.0 through 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.15 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (data corruption or device reload) via a crafted DNS response, aka Bug ID CSCup90532. Ios, Ios_xe, Ios_xe_3\.1sg, Ios_xe_3\.2ja, Ios_xe_3\.2sg, Ios_xe_3\.2xo, Ios_xe_3\.3sg, Ios_xe_3\.3sq, Ios_xe_3\.3xo, Ios_xe_3\.4sg, Ios_xe_3\.4sq, Ios_xe_3\.5sq, Ios_xe_3\.8ex 8.1
2016-10-05 CVE-2016-6379 Cisco IOS 12.2 and IOS XE 3.14 through 3.16 and 16.1 allow remote attackers to cause a denial of service (device reload) via crafted IP Detail Record (IPDR) packets, aka Bug ID CSCuu35089. Ios, Ios_xe 7.5
2016-10-05 CVE-2016-6378 Cisco IOS XE 3.1 through 3.17 and 16.1 through 16.2 allows remote attackers to cause a denial of service (device reload) via crafted ICMP packets that require NAT, aka Bug ID CSCuw85853. Ios_xe 7.5
2016-07-17 CVE-2016-1459 Cisco IOS 12.4 and 15.0 through 15.5 and IOS XE 3.13 through 3.17 allow remote authenticated users to cause a denial of service (device reload) via crafted attributes in a BGP message, aka Bug ID CSCuz21061. Ios, Ios_xe 5.3