4.3.4

DATE	CVE	VULNERABILITY TITLE	RISK
2016-05-25	CVE-2016-1407	Improper Input Validation vulnerability in Cisco IOS XR Cisco IOS XR through 5.3.2 mishandles Local Packet Transport Services (LPTS) flow-base entries, which allows remote attackers to cause a denial of service (session drop) by making many connection attempts to open TCP ports, aka Bug ID CSCux95576. network low complexity cisco CWE-20	7.5
2016-04-12	CVE-2016-1376	Improper Input Validation vulnerability in Cisco IOS XR Cisco IOS XR 4.2.3, 4.3.0, 4.3.4, and 5.3.1 on ASR 9000 devices allows remote attackers to cause a denial of service (CRC and symbol errors, and interface flap) via crafted bit patterns in packets, aka Bug ID CSCuv78548. network low complexity cisco CWE-20	5.3