Buffer overflow

Buffer overflow in the Overlay Transport Virtualization OTV GRE feature in Cisco NX-OS 5.0 through 7.3 on Nexus 7000 and 7700 devices allows remote attackers to execute arbitrary code via long parameters in a packet header, aka Bug ID CSCuy95701...

CVE-2016-1453

Buffer overflow in the Overlay Transport Virtualization OTV GRE feature in Cisco NX-OS 5.0 through 7.3 on Nexus 7000 and 7700 devices allows remote attackers to execute arbitrary code via long parameters in a packet header, aka Bug ID CSCuy95701...

CVE-2015-6393

Cisco NX-OS 4.1 through 7.3 and 11.0 through 11.2 on Nexus 2000, 3000, 3500, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices allows remote attackers to cause a denial of service device crash via malformed IPv4 DHCP packets to the DHCPv4 relay agent, aka Bug IDs CSCuq39250, CSCus21733,...

CVE-2015-6393

Cisco NX-OS Software Vulnerability CVE-2015-6393: A DoS in the DHCPv4 relay agent affects NX-OS 4.1–7.3 and 11.0–11.2 on Nexus 2000/3000/3500/5000/5500/5600/6000/7000/7700/9000. Root cause: improper validation of crafted IPv4 DHCPv4 packets processed by the relay agent, allowing remote attackers ...

CVE-2016-1454

Cisco NX-OS 4.0 through 7.3 and 11.0 through 11.2 on 1000v, 2000, 3000, 3500, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices allows remote attackers to cause a denial of service device reload by leveraging a peer relationship to send a crafted BGP UPDATE message, aka Bug IDs CSCuq77105 and...

CVE-2016-1454

CVE-2016-1454 affects Cisco NX-OS 4.0–7.3 and 11.0–11.2 on 1000v, 2000, 3000, 3500, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 series devices. The issue arises from incomplete input validation in the BGP UPDATE handling, allowing an unauthenticated, remote attacker to trigger a DoS (device relo...

CVE-2015-0721

Cisco NX-OS 4.0–7.3 on Multilayer Director and Nexus 1000V, 2000, 3000, 3500, 4000, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices is affected by CVE-2015-0721, where remote authenticated users can bypass AAA restrictions and obtain privileged CLI access through crafted parameters during SS...

CVE-2016-1453

Cisco NX-OS Buffer Overflow (CVE-2016-1453) affects Nexus 7000/7700 series with OTV GRE, in NX-OS 5.0–7.3. The root cause is incomplete input validation on the size of Overlay Transport Virtualization (OTV) packet header parameters, allowing a remote attacker to cause a buffer overflow and potent...

CVE-2015-0721

Cisco NX-OS 4.0 through 7.3 on Multilayer Director and Nexus 1000V, 2000, 3000, 3500, 4000, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices allows remote authenticated users to bypass intended AAA restrictions and obtain privileged CLI access via crafted parameters in an SSH connection...

CVE-2015-6392

Cisco NX-OS 4.1 through 7.3 and 11.0 through 11.2 on Nexus 2000, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices allows remote attackers to cause a denial of service device crash via crafted IPv4 DHCP packets to the 1 DHCPv4 relay agent or 2 smart relay agent, aka Bug IDs CSCuq24603,...

Design/Logic Flaw

Cisco NX-OS 4.1 through 7.3 and 11.0 through 11.2 on Nexus 2000, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices allows remote attackers to cause a denial of service device crash via crafted IPv4 DHCP packets to the 1 DHCPv4 relay agent or 2 smart relay agent, aka Bug IDs CSCuq24603,...

CVE-2015-6392

Cisco NX-OS 4.1 through 7.3 and 11.0 through 11.2 on Nexus 2000, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices allows remote attackers to cause a denial of service device crash via crafted IPv4 DHCP packets to the 1 DHCPv4 relay agent or 2 smart relay agent, aka Bug IDs CSCuq24603,...

CVE-2015-6392

CVE-2015-6392 affects Cisco NX-OS before patched updates: 4.1–7.3 and 11.0–11.2 on Nexus 2000/5000/5500/5600/6000/7000/7700/9000. The DoS arises from improper validation of crafted IPv4 DHCP packets processed by the DHCPv4 relay agent and the smart relay agent, allowing remote attackers to crash ...

Cisco NX-OS Software Malformed DHCPv4 Packet Denial of Service Vulnerability (cisco-sa-20161005-dhcp2)

A vulnerability in the implementation of the DHCPv4 relay agent in Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a...

Cisco NX-OS Border Gateway Protocol Denial of Service Vulnerability (cisco-sa-20161005-bgp)

A vulnerability in the Border Gateway Protocol BGP implementation of Cisco NX-OS System Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition due to the device unexpectedly reloading. Copyright C 2016 Greenbone Networks GmbH Some text descriptions mig...

Cisco NX-OS Software Crafted DHCPv4 Packet Denial of Service Vulnerability (cisco-sa-20161005-dhcp1)

A vulnerability in the implementation of the DHCPv4 relay agent and smart relay agent in Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be...

Design/Logic Flaw

Cisco NX-OS before 7.03I22e and 7.03I4 before 7.03I41 has an incorrect iptables local-interface configuration, which allows remote attackers to obtain sensitive information via TCP or UDP traffic, aka Bug ID CSCuz05365...

CVE-2016-1455

Cisco NX-OS before 7.03I22e and 7.03I4 before 7.03I41 has an incorrect iptables local-interface configuration, which allows remote attackers to obtain sensitive information via TCP or UDP traffic, aka Bug ID CSCuz05365...

CVE-2016-1455

Cisco NX-OS before 7.03I22e and 7.03I4 before 7.03I41 has an incorrect iptables local-interface configuration, which allows remote attackers to obtain sensitive information via TCP or UDP traffic, aka Bug ID CSCuz05365...

CVE-2016-1455

CVE-2016-1455 affects Cisco Nexus NX-OS before 7.0(3)I2(2e) and before 7.0(3)I4(1) in 7.0(3)I4. The issue is an incorrect iptables local-interface configuration that allows remote attackers to obtain sensitive information via TCP/UDP traffic. The root cause is improper filtering of traffic on loc...