PT-2016-3711 · Cisco · Cisco Nx-Os+1

Publicado 2016-10-05 · Atualizado 2017-07-30 · CVE-2015-6393

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco NX-OS versions 4.1 through 7.3 Cisco NX-OS versions 11.0 through 11.2

Description A vulnerability in the implementation of the DHCPv4 relay agent could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The issue is due to improper validation of malformed DHCPv4 packets. An attacker could exploit this by sending malformed DHCPv4 packets to an affected device, potentially causing the DHCP process or device to crash. This can be triggered by malformed DHCP packets processed by a DHCP relay agent listening on the device, using the IPv4 broadcast address or IPv4 unicast address of any interface configured on a device.

Recommendations For Cisco NX-OS versions 4.1 through 7.3, update to a fixed version to address the vulnerability. For Cisco NX-OS versions 11.0 through 11.2, update to a fixed version to address the vulnerability.

Correção

DoS

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2015-6393

Produtos afetados

Cisco Nx-Os

Cisco Nexus

Referências · 5

• http://securitytracker.com/id/1036949 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-6393 · Nota de Segurança
• http://securityfocus.com/bid/93419 · Nota
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161005-dhcp2 · Aviso do Fabricante
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161005-dhcp2 · Aviso do Fabricante