Vulnerabilities > Cisco > IOS XR > 4.3.2

DATE CVE VULNERABILITY TITLE RISK
2016-05-25 CVE-2016-1407 Improper Input Validation vulnerability in Cisco IOS XR
Cisco IOS XR through 5.3.2 mishandles Local Packet Transport Services (LPTS) flow-base entries, which allows remote attackers to cause a denial of service (session drop) by making many connection attempts to open TCP ports, aka Bug ID CSCux95576.
network
low complexity
cisco CWE-20
7.5
2016-03-12 CVE-2016-1361 Resource Management Errors vulnerability in Cisco IOS XR
Cisco IOS XR through 4.3.2 on Gigabit Switch Router (GSR) 12000 devices does not properly check for a Bidirectional Forwarding Detection (BFD) header in a UDP packet, which allows remote attackers to cause a denial of service (line-card restart) via a crafted packet, aka Bug ID CSCuw56900.
high complexity
cisco CWE-399
5.3