Security Bulletin: Vulnerabilities in OpenSSL affect IBM Cisco MDS Directors and Switches (CVE-2016-0701, CVE-2015-3197)

Summary OpenSSL vulnerabilities were disclosed on January 28, 2016 by the OpenSSL Project. OpenSSL is used by IBM Cisco MDS Directors and Switches. IBM Cisco MDS Directors and Switches has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2016-0701 DESCRIPTION: OpenSSL could allow a...

CVE-2012-1340: Improper Restriction of Operations within the Bounds of a Memory Buffer

The Fibre Channel over IP FCIP implementation in Cisco MDS NX-OS 4.2 and 5.2 on MDS 9000 series switches allows remote attackers to cause a denial of service module reload via a crafted FCIP header, aka Bug ID CSCtn93151...

PT-2012-3197

Name of the Vulnerable Software and Affected Versions Cisco MDS NX-OS versions 4.2 and 5.2 Description The issue allows remote attackers to cause a denial of service, resulting in a module reload, by sending a crafted FCIP header. Recommendations For Cisco MDS NX-OS version 4.2, update to a versi...