Cisco IOS XE 3.2 through 3.4 before 3.4.2S and 3.5 on 1000 series Aggregation Services Routers (ASR) when bridge domain interface (BDI) is enabled allows remote attackers to cause a denial of service (card reload) via packets that are not properly handled during the processing of encapsulation aka Bug ID CSCtt11558.