Cisco Nexus 1000v Application Virtual Switch Cisco Discovery Protocol Packet Processing Denial of Service (CVE-2016-1465)

Cisco Nexus 1000v Application Virtual Switch AVS devices before 5.21SV31.5i allow remote attackers to cause a denial of service ESXi hypervisor crash and purple screen via a crafted Cisco Discovery Protocol packet that triggers an out-of-bounds memory access, aka Bug ID CSCuw57985. This plugin on...

CVE-2016-1465

CVE-2016-1465 affects Cisco Nexus 1000v Application Virtual Switch (AVS) before 5.2(1)SV3(1.5i). The issue is due to insufficient input validation of Cisco Discovery Protocol packets, which can trigger an out-of-bounds memory access and crash the ESXi hypervisor (purple screen), causing DoS. Mult...