← Back

Ios Xr

ios_xr

Vendor: Cisco • 200 CVEs

CVEs (200)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2014-3353
1Cisco
1Ios Xr
May 6, 2026
Sep 4, 2014
N/A· v4
N/A· v3
7.1 HIGH· v2
Cisco IOS XR 4.3(.2) and earlier, as used in Cisco Carrier Routing System (CRS), allows remote attackers to cause a denial of service (CPU consumption and IPv6 packet drops) via a malformed IPv6 packet, aka Bug ID CSCuo9...Show more
Cisco IOS XR 4.3(.2) and earlier, as used in Cisco Carrier Routing System (CRS), allows remote attackers to cause a denial of service (CPU consumption and IPv6 packet drops) via a malformed IPv6 packet, aka Bug ID CSCuo95165.Show less
CVE-2014-3335
1Cisco
8Asr 9000 Rsp440 Router
Asr 9001Asr 9006+5 more
May 6, 2026
Aug 26, 2014
N/A· v4
N/A· v3
4.6 MEDIUM· v2
Cisco IOS XR 4.3(.2) and earlier on ASR 9000 devices does not properly perform NetFlow sampling of packets with multicast destination MAC addresses, which allows remote attackers to cause a denial of service (chip and ca...Show more
Cisco IOS XR 4.3(.2) and earlier on ASR 9000 devices does not properly perform NetFlow sampling of packets with multicast destination MAC addresses, which allows remote attackers to cause a denial of service (chip and card hangs) via a crafted packet, aka Bug ID CSCup77750.Show less
CVE-2014-3322
1Cisco
8Asr 9000 Rsp440 Router
Asr 9001Asr 9006+5 more
May 6, 2026
Jul 24, 2014
N/A· v4
N/A· v3
6.1 MEDIUM· v2
Cisco IOS XR 4.3(.2) and earlier on ASR 9000 devices does not properly perform NetFlow sampling of IP packets, which allows remote attackers to cause a denial of service (chip and card hangs) via malformed (1) IPv4 or (2...Show more
Cisco IOS XR 4.3(.2) and earlier on ASR 9000 devices does not properly perform NetFlow sampling of IP packets, which allows remote attackers to cause a denial of service (chip and card hangs) via malformed (1) IPv4 or (2) IPv6 packets, aka Bug ID CSCuo68417.Show less
CVE-2014-3321
1Cisco
8Asr 9000 Rsp440 Router
Asr 9001Asr 9006+5 more
May 6, 2026
Jul 18, 2014
N/A· v4
N/A· v3
5.7 MEDIUM· v2
Cisco IOS XR 4.3.4 and earlier on ASR 9000 devices, when bridge-group virtual interface (BVI) routing is enabled, allows remote attackers to cause a denial of service (chip and card hangs) via a series of crafted MPLS pa...Show more
Cisco IOS XR 4.3.4 and earlier on ASR 9000 devices, when bridge-group virtual interface (BVI) routing is enabled, allows remote attackers to cause a denial of service (chip and card hangs) via a series of crafted MPLS packets, aka Bug ID CSCuo91149.Show less
CVE-2014-3308
1Cisco
8Asr 9000 Rsp440 Router
Asr 9001Asr 9006+5 more
May 6, 2026
Jul 7, 2014
N/A· v4
N/A· v3
6.4 MEDIUM· v2
Cisco IOS XR on Trident line cards in ASR 9000 devices lacks a static punt policer, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted packets, aka Bug ID CSCun83985.
CVE-2014-2176
1Cisco
7Asr 9001
Asr 9006Asr 9010+4 more
May 6, 2026
Jun 14, 2014
N/A· v4
N/A· v3
7.1 HIGH· v2
Cisco IOS XR 4.1.2 through 5.1.1 on ASR 9000 devices, when a Trident-based line card is used, allows remote attackers to cause a denial of service (NP chip and line card reload) via malformed IPv6 packets, aka Bug ID CSC...Show more
Cisco IOS XR 4.1.2 through 5.1.1 on ASR 9000 devices, when a Trident-based line card is used, allows remote attackers to cause a denial of service (NP chip and line card reload) via malformed IPv6 packets, aka Bug ID CSCun71928.Show less
CVE-2014-3271
1Cisco
1Ios Xr
May 6, 2026
May 20, 2014
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The DHCPv6 implementation in Cisco IOS XR allows remote attackers to cause a denial of service (device crash) via a malformed packet, aka Bug IDs CSCum85558, CSCum20949, CSCul61849, and CSCul71149.
CVE-2014-3270
1Cisco
1Ios Xr
May 6, 2026
May 20, 2014
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The DHCPv6 implementation in Cisco IOS XR allows remote attackers to cause a denial of service (process hang) via a malformed packet, aka Bug ID CSCul80924.
CVE-2014-2144
1Cisco
1Ios Xr
May 6, 2026
Apr 5, 2014
N/A· v4
N/A· v3
6.1 MEDIUM· v2
Cisco IOS XR does not properly throttle ICMPv6 redirect packets, which allows remote attackers to cause a denial of service (IPv4 and IPv6 transit outage) via crafted redirect messages, aka Bug ID CSCum14266.
CVE-2013-6700
1Cisco
1Ios Xr
Apr 29, 2026
Nov 29, 2013
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The SNMP module in Cisco IOS XR allows remote attackers to cause a denial of service (process reload) via a request for an unspecified MIB, aka Bug ID CSCuh43144.
CVE-2013-5565
1Cisco
1Ios Xr
Apr 29, 2026
Nov 8, 2013
N/A· v4
N/A· v3
4.3 MEDIUM· v2
The OSPFv3 functionality in Cisco IOS XR 5.1 allows remote attackers to cause a denial of service (process crash) via a malformed LSA Type-1 packet, aka Bug ID CSCuj82176.
CVE-2013-5549
1Cisco
1Ios Xr
Apr 29, 2026
Oct 25, 2013
N/A· v4
N/A· v3
7.1 HIGH· v2
Cisco IOS XR 3.8.1 through 4.2.0 does not properly process fragmented packets within the RP-A, RP-B, PRP, and DRP-B route-processor components, which allows remote attackers to cause a denial of service (transmission out...Show more
Cisco IOS XR 3.8.1 through 4.2.0 does not properly process fragmented packets within the RP-A, RP-B, PRP, and DRP-B route-processor components, which allows remote attackers to cause a denial of service (transmission outage) via (1) IPv4 or (2) IPv6 traffic, aka Bug ID CSCuh30380.Show less
CVE-2013-5503
1Cisco
1Ios Xr
Apr 29, 2026
Oct 2, 2013
N/A· v4
N/A· v3
7.8 HIGH· v2
The UDP process in Cisco IOS XR 4.3.1 does not free packet memory upon detecting full packet queues, which allows remote attackers to cause a denial of service (memory consumption) via UDP packets to listening ports, aka...Show more
The UDP process in Cisco IOS XR 4.3.1 does not free packet memory upon detecting full packet queues, which allows remote attackers to cause a denial of service (memory consumption) via UDP packets to listening ports, aka Bug ID CSCue69413.Show less
CVE-2013-5498
1Cisco
1Ios Xr
Apr 29, 2026
Sep 27, 2013
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The PPTP-ALG component in CRS Carrier Grade Services Engine (CGSE) and ASR 9000 Integrated Service Module (ISM) in Cisco IOS XR allows remote attackers to cause a denial of service (module reset) via crafted packet strea...Show more
The PPTP-ALG component in CRS Carrier Grade Services Engine (CGSE) and ASR 9000 Integrated Service Module (ISM) in Cisco IOS XR allows remote attackers to cause a denial of service (module reset) via crafted packet streams, aka Bug ID CSCue91963.Show less
CVE-2013-3470
1Cisco
1Ios Xr
Apr 29, 2026
Aug 30, 2013
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The RIP process in Cisco IOS XR allows remote attackers to cause a denial of service (process crash) via a crafted version-2 RIP packet, aka Bug ID CSCue46731.
CVE-2013-3464
1Cisco
1Ios Xr
Apr 29, 2026
Aug 13, 2013
N/A· v4
N/A· v3
4.6 MEDIUM· v2
Cisco IOS XR allows local users to cause a denial of service (Silicon Packet Processor memory corruption, improper mutex handling, and device reload) by starting an outbound flood of large ICMP Echo Request packets and s...Show more
Cisco IOS XR allows local users to cause a denial of service (Silicon Packet Processor memory corruption, improper mutex handling, and device reload) by starting an outbound flood of large ICMP Echo Request packets and stopping this with a CTRL-C sequence, aka Bug ID CSCui60347.Show less
CVE-2013-1204
1Cisco
1Ios Xr
Apr 29, 2026
May 23, 2013
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Memory leak in the SNMP process in Cisco IOS XR allows remote attackers to cause a denial of service (memory consumption or process reload) by sending many port-162 UDP packets, aka Bug ID CSCug80345.
CVE-2013-1234
1Cisco
1Ios Xr
Apr 29, 2026
May 3, 2013
N/A· v4
N/A· v3
4.0 MEDIUM· v2
The SNMP module in Cisco IOS XR allows remote authenticated users to cause a denial of service (process restart) via crafted SNMP packets, aka Bug ID CSCue69472.
CVE-2013-1216
1Cisco
1Ios Xr
Apr 29, 2026
Apr 29, 2013
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Memory leak in the SNMP module in Cisco IOS XR allows remote authenticated users to cause a denial of service (memory consumption and process restart) via crafted SNMP packets, aka Bug ID CSCue31546.
CVE-2013-1162
1Cisco
1Ios Xr
Apr 29, 2026
Mar 26, 2013
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The traffic engineering (TE) processing subsystem in Cisco IOS XR allows remote attackers to cause a denial of service (process restart) via crafted TE packets, aka Bug ID CSCue04000.