Reference: CERT-EU Security Advisory 2016-122
Title: Cisco - Denial of Service Vulnerabilities
Version history: 24/03/2016 Initial publication.


Summary:
========
The March 23, 2016, release of the Cisco IOS and IOS XE Software
Security Advisory Bundled Publication includes six Cisco Security
Advisories that describe vulnerabilities in Cisco IOS Software. Four of
the advisories are describing vulnerabilities that are common to both
Cisco IOS and IOS XE Software. One advisory describes a vulnerability
that exists also in Cisco Unified Communications Manager Software.
Another advisory describes a vulnerability that also exists in Cisco
NX-OS Software. All the vulnerabilities have a Security Impact Rating of
"High." Exploits of the individual vulnerabilities could result in a
memory leak or a denial of service (DoS) condition.



Products Affected:
==================

To quickly determine if a specific Cisco IOS or IOS XE Software release
is exposed to Cisco product vulnerabilities, use Cisco IOS Software
Checker [1]



Recommendations:
===============

Cisco has released software updates that address these vulnerabilities.
These advisories are available at the following link [2]



References:
==========
[1] http://tools.cisco.com/security/center/selectIOSVersion.x

[2]
http://www.cisco.com/c/en/us/about/security-center/event-response/cisco-erp-march-2016.html



Best Regards,

CERT-EU Team (http://cert.europa.eu)
Phone: +32.2.2990005 / e-mail: cert-eu@ec.europa.eu
PGP KeyID 0x46AC4383
FP: 9011 6BE9 D642 DD93 8348 DAFA 27A4 06CA 46AC 4383
Privacy Statement:
http://cert.europa.eu/cert/plainedition/en/cert_privacy.htmlReference