PT-2016-1516

CVE-2015-0718

·

تاريخ النشر

2016-03-02

·

تاريخ التحديث

2016-12-03

الوصف من

CVSS 2.0
7.8
عالية
المقاييسAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Cisco NX-OS versions 4.0 through 6.1
Description The issue is related to errors in resource management, allowing a remote attacker to cause a denial of service (TCP stack reload) by sending crafted TCP packets to a device that has a TIME WAIT TCP session. This can be exploited using either IPv4 or IPv6 packets, and the vulnerability can be triggered by a crafted sequence of TCP packets destined for TCP ports listening on the device.
Recommendations For Cisco NX-OS versions 4.0 through 6.1, update to a newer version that includes the fix for this issue, as Cisco has released software updates that address this vulnerability. At the moment, there is no information about other workarounds that address this vulnerability.
قابلية الاستغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
تصنيف نقاط الضعف
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾