CVE-2015-4324

Buffer overflow in Cisco NX-OS on Nexus 1000V devices for VMware vSphere 7.30ZN0.81, Nexus 3000 devices 7.30ZN0.81, Nexus 4000 devices 4.12E11c, Nexus 7000 devices 7.20N10.1, and Nexus 9000 devices 7.30ZN0.81 allows remote attackers to cause a denial of service IGMP process restart via a malforme...

Cisco Nexus 9000 Series NX-OS '/tmp' Directory File Resource Consumption Vulnerability

Cisco Nexus is a data center-class switch from Cisco. A security vulnerability exists in the Cisco Nexus 9000 Series NX-OS that allows an authenticated user to copy oversized files to the '/tmp' directory, and an error occurs in the processing of the files, which can consume a large amount of...

Cisco NX-OS Software Denial of Service Vulnerability

Cisco NX-OS Software is the United States Cisco Cisco company's set of data center-oriented operating system. A denial of service vulnerability exists in Cisco NX-OS Software. An attacker could exploit this vulnerability to cause a denial of service, denying service to legitimate users...

Cisco Nexus 3000 Series NX-OS Java Link Target Service Restart Vulnerability

Cisco Nexus 3000 Series is a switch product developed by Cisco. A security vulnerability in the NX-OS used by the Cisco Nexus 3000 Series allows a remote attacker to exploit the vulnerability by sending a special Java link to the target NDB service, which can cause the target Java process to...

Cisco Nexus Operating System Address Resolution Protocol Denial of Service Vulnerability

A vulnerability in the Address Resolution Protocol ARP input packet processing of the Cisco Nexus Operating System NX-OS devices could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition. The vulnerability is due to improper validation of the ARP packet and the...

Incomplete 'Stagefright' Security Patch Leaves Android Vulnerable to Text Hack

Wanna hack someone's Android smartphone by sending just an MMS message? Yes, you can, because Google's patch for the Stagefright vulnerability in hundreds of Millions of Android devices is BUGGY. Last week, Google issued an official patch for Stagefright vulnerability that affects 95 percent of...

Stagefright Patch Incomplete Leaving Android Devices Still Exposed

Google today released to open source a new patch for the infamous Stagefright vulnerability found in 950 million Android devices after researchers at Exodus Intelligence discovered the original patch was incomplete and Android devices remain exposed to attack. “We’ve already sent the fix to our...

Nexus Security Bulletin—August 2015Stay organized with collectionsSave and categorize content based on your preferences.

We have released a security update to Nexus devices through an over-the-air OTA update as part of our Android Security Bulletin Monthly Release process. The Nexus firmware images have also been released to the Google Developer site. Builds LMY48I or later address these issues. Partners were...

Cisco Nexus 9000 Series Resource Exhaustion Denial of Service Vulnerability

A vulnerability in Cisco Nexus 9000 Series software could allow an authenticated, remote attacker to cause a denial of service DoS condition. An attacker could exploit the vulnerability by copying large files to the device file system. Processing the large files could cause the device to stop...

Cisco Nexus 3000 Nexus Data Broker Denial of Service Vulnerability

A vulnerability in the Nexus Data Broker NDB in Cisco Nexus 3000 Series Switches could allow an unauthenticated, remote attacker to cause a partial denial of service DoS condition. The vulnerability is in handling incoming connections to the Java application. An attacker could exploit this...

Android 'Serialization' Vulnerability Affects 55 Percent of Devices

Google has patched a severe Android vulnerability that researchers at IBM said impacts more than 55 percent of devices. As with most Android vulnerabilities, users are reliant on handset makers and carriers to push patches downstream to devices, something they’ve not always been diligent about. I...

Google Plans Monthly Security Updates for Nexus Phones

LAS VEGAS–Google is changing the way that it updates its Nexus Android phones and will now send out monthly over-the-air updates to users. The first update is being pushed out today, and the company said that other Android handset manufacturers are planning to follow suit and provide monthly...

Android Stagefright contains multiple vulnerabilities

Overview Stagefright is the media playback service for Android, introduced in Android 2.2 Froyo. Stagefright in versions of Android prior to 5.1.1r9 may contain multiple vulnerabilities, including several integer overflows, which may allow a remote attacker to execute code on the device...

CVE-2015-4235

Cisco Application Policy Infrastructure Controller APIC devices with software before 1.03o and 1.1 before 1.11j and Nexus 9000 ACI devices with software before 11.04o and 11.1 before 11.11j do not properly restrict access to the APIC filesystem, which allows remote authenticated users to obtain...

Design/Logic Flaw

Cisco Application Policy Infrastructure Controller APIC devices with software before 1.03o and 1.1 before 1.11j and Nexus 9000 ACI devices with software before 11.04o and 11.1 before 11.11j do not properly restrict access to the APIC filesystem, which allows remote authenticated users to obtain...

CVE-2015-4235

Cisco Application Policy Infrastructure Controller APIC devices with software before 1.03o and 1.1 before 1.11j and Nexus 9000 ACI devices with software before 11.04o and 11.1 before 11.11j do not properly restrict access to the APIC filesystem, which allows remote authenticated users to obtain...

CVE-2015-4235

Summary: CVE-2015-4235 affects Cisco APIC and Nexus 9000 ACI devices; versioned software before 1.0(3o) and 1.1 before 1.1(1j) on APIC, and before 11.0(4o)/11.1 before 11.1(1j) on Nexus 9000 ACI, do not properly restrict access to the APIC filesystem. This enables remote authenticated users to ob...

Cisco Application Policy Infrastructure Controllers and Nexus 9000 Series ACI Mode Switches Unauthorized Access Vulnerability

Cisco Application Policy Infrastructure is a controller that automates the management of application-centric infrastructures.Cisco Nexus 9000 Series ACI Mode Switches The Cisco Nexus 9000 Series ACI Mode Switches are 9000 series switches for application-centric infrastructure ACI. An unauthorized...

The vulnerability of the microprogramming software of the Cisco Nexus 1000V virtual switch allows a remote attacker to bypass the device’s security mechanisms.

The vulnerability in the key generator implementation util/keygen.c allows a malicious individual to discover the key through brute-force attacks...

The vulnerability of Cisco Nexus 1000V microprogramming software allows a remote attacker to gain unauthorized access to the device.

The function for receiving messages in the ntpproto.c file continues to operate even after an error message is displayed. This allows a remote attacker to gain unauthorized access to the device using specially crafted packets...