CVE-2015-4323 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Cisco MDS 9000 Nx-os

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer4 documents4 sources
Severity
6.1MEDIUMNVD
EPSS
0.8%
top 25.80%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Cisco MDS 9000 Nx-osCisco Nx-os
Timeline
PublishedAug 19
Latest updateMay 17

Description

Buffer overflow in Cisco NX-OS on Nexus 1000V devices for VMware vSphere 7.3(0)ZN(0.9); Nexus 3000 devices 6.0(2)U5(1.41), 7.0(3)I2(0.373), and 7.3(0)ZN(0.83); Nexus 4000 devices 4.1(2)E1(1b); Nexus 7000 devices 6.2(14)S1; Nexus 9000 devices 7.3(0)ZN(0.9); and MDS 9000 devices 6.2 (13) and 7.1(0)ZN(91.99) and MDS SAN-OS 7.1(0)ZN(91.99) allows remote attackers to cause a denial of service (device outage) via a crafted ARP packet, related to incorrect MTU validation, aka Bug IDs CSCuv71933, CSCuv6…

CVSS vector

AV:A/AC:L/C:N/I:N/A:CExploitability: 6.5 | Impact: 6.9

Affected Packages2 packages

▶NVDcisco/mds_9000_nx-os6.2\(13\), 7.1\(0\)zn\(91.99\)+1
▶NVDcisco/nx-os6 versions+5

🔴Vulnerability Details

2
GHSA
GHSA-f846-7hhm-3qxh: Buffer overflow in Cisco NX-OS on Nexus 1000V devices for VMware vSphere 7↗2022-05-17
▶
CVEList
CVE-2015-4323: Buffer overflow in Cisco NX-OS on Nexus 1000V devices for VMware vSphere 7↗2015-08-19
▶

📋Vendor Advisories

1
Cisco
Cisco Nexus Operating System Address Resolution Protocol Denial of Service Vulnerability↗2015-08-14
▶
CVE-2015-4323 — Cisco MDS 9000 Nx-os vulnerability | cvebase