CVE-2018-0102 — Double Free in Cisco Nx-os

CWE-399CWE-415 — Double Free4 documents4 sources
Severity
7.4HIGHNVD
EPSS
0.3%
top 50.95%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Cisco Nx-os
Timeline
PublishedJan 18
Latest updateMay 13

Description

A vulnerability in the Pong tool of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a reload of an affected device, resulting in a denial of service (DoS) condition. The vulnerability exists because the affected software attempts to free the same area of memory twice. An attacker could exploit this vulnerability by sending a pong request to an affected device from a location on the network that causes the pong reply packet to egress both a FabricPath port and a no…

CVSS vector

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:HExploitability: 2.8 | Impact: 4.0

Affected Packages1 packages

▶NVDcisco/nx-os7.2\(1\)d\(1\), 7.2\(2\)d1\(1\), 7.2\(2\)d1\(2\)+2

🔴Vulnerability Details

2
GHSA
GHSA-c2jm-2fx3-h7g6: A vulnerability in the Pong tool of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a reload of an affected device, re↗2022-05-13
▶
CVEList
CVE-2018-0102: A vulnerability in the Pong tool of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a reload of an affected device, re↗2018-01-18
▶

📋Vendor Advisories

1
Cisco
Cisco NX-OS Software Pong Packet Denial of Service Vulnerability↗2018-01-17
▶
CVE-2018-0102 — Double Free in Cisco Nx-os | cvebase