PT-2017-16203 · Vmware · Vmware Nsx Edge

Publicado 2017-12-05 · Atualizado 2017-12-22 · CVE-2017-4920

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions VMware NSX-V Edge versions 6.2.x prior to 6.2.8 VMware NSX-V Edge versions 6.3.x prior to 6.3.3

Description The issue arises from the incorrect handling of link-state advertisements (LSAs) in the OSPF protocol implementation. A rogue LSA can exploit this, causing continuous sending of LSAs between two routers, potentially leading to a loop or loss of connectivity.

Recommendations For versions 6.2.x prior to 6.2.8, update to version 6.2.8 or later. For versions 6.3.x prior to 6.3.3, update to version 6.3.3 or later.

Correção

Resource Exhaustion

Enumeração de Fraquezas

CWE-400

Identificadores relacionados

CVE-2017-4920

Produtos afetados

Vmware Nsx Edge

Referências · 4

• http://securityfocus.com/bid/100277 · Nota
• https://vmware.com/security/advisories/VMSA-2017-0014.html · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-4920 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-4920 · Nota de Segurança