Cisco IOS & IOS-XE Multiple Vulnerabilities

Impact

• Denial of Service
• Remote Code Execution
• Spoofing

System / Technologies affected

• Cisco IOS
• Cisco IOS-XE
• Cisco IOS-XE on Cisco ASR 1000, 4400, and 1000v Series Routers

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

• The vendor has issued a fix:
  http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150325-ikev2
  http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150325-mdns
  http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150325-tcpleak
  http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150325-iosxe
  http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150325-ani
  http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150325-wedge
  http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150325-cip

Vulnerability Identifier

• CVE-2015-0642
• CVE-2015-0643
• CVE-2015-0650
• CVE-2015-0646
• CVE-2015-0645
• CVE-2015-0644
• CVE-2015-0641
• CVE-2015-0640
• CVE-2015-0639
• CVE-2015-0635
• CVE-2015-0636
• CVE-2015-0637
• CVE-2015-0638
• CVE-2015-0647
• CVE-2015-0648
• CVE-2015-0649

Source

• SecurityTracker
• Cisco

Related Link

• http://securitytracker.com/id/1031978
• http://securitytracker.com/id/1031979
• http://securitytracker.com/id/1031980
• http://securitytracker.com/id/1031981
• http://securitytracker.com/id/1031982
• http://securitytracker.com/id/1031983
• http://securitytracker.com/id/1031984