Lucene search

[email protected]CVE-2016-1465

HistoryJul 28, 2016 - 1:59 a.m.

CVE-2016-1465

2016-07-2801:59:44

CWE-399

[email protected]

web.nvd.nist.gov

cisco

nexus

1000v

avs

denial of service

vulnerability

cve-2016-1465

nvd

6.1 Medium

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:N/I:N/A:C

6.5 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

6.4 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

75.2%

JSON

Cisco Nexus 1000v Application Virtual Switch (AVS) devices before 5.2(1)SV3(1.5i) allow remote attackers to cause a denial of service (ESXi hypervisor crash and purple screen) via a crafted Cisco Discovery Protocol packet that triggers an out-of-bounds memory access, aka Bug ID CSCuw57985.

Affected configurations

NVD

Node

cisconx-osMatch4.0\(4\)sv1\(1\)

cisconx-osMatch4.0\(4\)sv1\(2\)

cisconx-osMatch4.0\(4\)sv1\(3\)

cisconx-osMatch4.0\(4\)sv1\(3a\)

cisconx-osMatch4.0\(4\)sv1\(3b\)

cisconx-osMatch4.0\(4\)sv1\(3c\)

cisconx-osMatch4.0\(4\)sv1\(3d\)

cisconx-osMatch4.2\(1\)sv1\(4\)

cisconx-osMatch4.2\(1\)sv1\(4a\)

cisconx-osMatch4.2\(1\)sv1\(4b\)

cisconx-osMatch4.2\(1\)sv1\(5.1\)

cisconx-osMatch4.2\(1\)sv1\(5.1a\)

cisconx-osMatch4.2\(1\)sv1\(5.2\)

cisconx-osMatch4.2\(1\)sv1\(5.2b\)

cisconx-osMatch4.2\(1\)sv2\(1.1\)

cisconx-osMatch4.2\(1\)sv2\(1.1a\)

cisconx-osMatch4.2\(1\)sv2\(2.1\)

cisconx-osMatch4.2\(1\)sv2\(2.1a\)

cisconx-osMatch5.2\(1\)sv3\(1.1\)

cisconx-osMatch5.2\(1\)sv3\(1.3\)

cisconx-osMatch5.2\(1\)sv3\(1.4\)

AND

cisconexus_1000vMatch-

CPENameOperatorVersion
cisco:nx-oscisco nx-oseq4.0\(4\)sv1\(1\)
cisco:nx-oscisco nx-oseq4.0\(4\)sv1\(2\)
cisco:nx-oscisco nx-oseq4.0\(4\)sv1\(3\)
cisco:nx-oscisco nx-oseq4.0\(4\)sv1\(3a\)
cisco:nx-oscisco nx-oseq4.0\(4\)sv1\(3b\)
cisco:nx-oscisco nx-oseq4.0\(4\)sv1\(3c\)
cisco:nx-oscisco nx-oseq4.0\(4\)sv1\(3d\)
cisco:nx-oscisco nx-oseq4.2\(1\)sv1\(4\)
cisco:nx-oscisco nx-oseq4.2\(1\)sv1\(4a\)
cisco:nx-oscisco nx-oseq4.2\(1\)sv1\(4b\)

CPE	Name	Operator	Version
cisco:nx-os	cisco nx-os	eq	4.0\(4\)sv1\(1\)
cisco:nx-os	cisco nx-os	eq	4.0\(4\)sv1\(2\)
cisco:nx-os	cisco nx-os	eq	4.0\(4\)sv1\(3\)
cisco:nx-os	cisco nx-os	eq	4.0\(4\)sv1\(3a\)
cisco:nx-os	cisco nx-os	eq	4.0\(4\)sv1\(3b\)
cisco:nx-os	cisco nx-os	eq	4.0\(4\)sv1\(3c\)
cisco:nx-os	cisco nx-os	eq	4.0\(4\)sv1\(3d\)
cisco:nx-os	cisco nx-os	eq	4.2\(1\)sv1\(4\)
cisco:nx-os	cisco nx-os	eq	4.2\(1\)sv1\(4a\)
cisco:nx-os	cisco nx-os	eq	4.2\(1\)sv1\(4b\)

Rows per page:

1-10 of 211

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160727-avs

www.securityfocus.com/bid/92154

www.securitytracker.com/id/1036469

6.1 Medium

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:N/I:N/A:C

6.5 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

6.4 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

75.2%

JSON

Related for CVE-2016-1465

nvd1 cisco1 openvas1 cvelist1 prion1 nessus1