PT-2016-1516

CVE-2015-0718

·

Published

2016-03-02

·

Updated

2016-12-03

Description by

CVSS 2.0
7.8
High
MetricsAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Cisco NX-OS versions 4.0 through 6.1
Description The issue is related to errors in resource management, allowing a remote attacker to cause a denial of service (TCP stack reload) by sending crafted TCP packets to a device that has a TIME WAIT TCP session. This can be exploited using either IPv4 or IPv6 packets, and the vulnerability can be triggered by a crafted sequence of TCP packets destined for TCP ports listening on the device.
Recommendations For Cisco NX-OS versions 4.0 through 6.1, update to a newer version that includes the fix for this issue, as Cisco has released software updates that address this vulnerability. At the moment, there is no information about other workarounds that address this vulnerability.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾