CVE-2015-4324
Severity Score
6.1
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Buffer overflow in Cisco NX-OS on Nexus 1000V devices for VMware vSphere 7.3(0)ZN(0.81), Nexus 3000 devices 7.3(0)ZN(0.81), Nexus 4000 devices 4.1(2)E1(1c), Nexus 7000 devices 7.2(0)N1(0.1), and Nexus 9000 devices 7.3(0)ZN(0.81) allows remote attackers to cause a denial of service (IGMP process restart) via a malformed IGMPv3 packet that is mishandled during memory allocation, aka Bug IDs CSCuv69713, CSCuv69717, CSCuv69723, CSCuv69732, and CSCuv48908.
Desbordamiento de búffer en Cisco NX-OS en dispositivos Nexus 1000V para VMware vSphere 7.3(0)ZN(0.81), dispositivos Nexus 3000 7.3(0)ZN(0.81), dispositivos Nexus 4000 4.1(2)E1(1c), dispositivos Nexus 7000 7.2(0)N1(0.1), y dispositivos Nexus 9000 7.3(0)ZN(0.81), permite a atacantes remotos causar una denegación de servicio (reinicio del proceso IGMP) a través de un paquete IGMPv3 mal formado que es manejado incorrectamente durante la asignación de memoria, también conocida como Bug IDs CSCuv69713, CSCuv69717, CSCuv69723, CSCuv69732 y CSCuv48908.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2015-06-04 CVE Reserved
- 2015-08-19 CVE Published
- 2023-03-07 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
References (3)
| URL | Tag | Source |
|---|---|---|
| http://www.securityfocus.com/bid/76372 | Third Party Advisory | |
| http://www.securitytracker.com/id/1033327 | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://tools.cisco.com/security/center/viewAlert.x?alertId=40470 | 2017-01-04 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Cisco Search vendor "Cisco" | Nx-os Search vendor "Cisco" for product "Nx-os" | 7.3\(0\)zn\(0.81\) Search vendor "Cisco" for product "Nx-os" and version "7.3\(0\)zn\(0.81\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Nexus 3016 Search vendor "Cisco" for product "Nexus 3016" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Nx-os Search vendor "Cisco" for product "Nx-os" | 7.3\(0\)zn\(0.81\) Search vendor "Cisco" for product "Nx-os" and version "7.3\(0\)zn\(0.81\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Nexus 3048 Search vendor "Cisco" for product "Nexus 3048" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Nx-os Search vendor "Cisco" for product "Nx-os" | 7.3\(0\)zn\(0.81\) Search vendor "Cisco" for product "Nx-os" and version "7.3\(0\)zn\(0.81\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Nexus 3064 Search vendor "Cisco" for product "Nexus 3064" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Nx-os Search vendor "Cisco" for product "Nx-os" | 7.3\(0\)zn\(0.81\) Search vendor "Cisco" for product "Nx-os" and version "7.3\(0\)zn\(0.81\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Nexus 31128pq Search vendor "Cisco" for product "Nexus 31128pq" | * | - |
Safe
|
| Cisco Search vendor "Cisco" | Nx-os Search vendor "Cisco" for product "Nx-os" | 7.3\(0\)zn\(0.81\) Search vendor "Cisco" for product "Nx-os" and version "7.3\(0\)zn\(0.81\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Nexus 3132q Search vendor "Cisco" for product "Nexus 3132q" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Nx-os Search vendor "Cisco" for product "Nx-os" | 7.3\(0\)zn\(0.81\) Search vendor "Cisco" for product "Nx-os" and version "7.3\(0\)zn\(0.81\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Nexus 3164q Search vendor "Cisco" for product "Nexus 3164q" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Nx-os Search vendor "Cisco" for product "Nx-os" | 7.3\(0\)zn\(0.81\) Search vendor "Cisco" for product "Nx-os" and version "7.3\(0\)zn\(0.81\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Nexus 3172 Search vendor "Cisco" for product "Nexus 3172" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Nx-os Search vendor "Cisco" for product "Nx-os" | 7.3\(0\)zn\(0.81\) Search vendor "Cisco" for product "Nx-os" and version "7.3\(0\)zn\(0.81\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Nexus 3232c Search vendor "Cisco" for product "Nexus 3232c" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Nx-os Search vendor "Cisco" for product "Nx-os" | 7.3\(0\)zn\(0.81\) Search vendor "Cisco" for product "Nx-os" and version "7.3\(0\)zn\(0.81\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Nexus 3264q Search vendor "Cisco" for product "Nexus 3264q" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Nx-os Search vendor "Cisco" for product "Nx-os" | 7.3\(0\)zn\(0.81\) Search vendor "Cisco" for product "Nx-os" and version "7.3\(0\)zn\(0.81\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Nexus 3524 Search vendor "Cisco" for product "Nexus 3524" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Nx-os Search vendor "Cisco" for product "Nx-os" | 7.3\(0\)zn\(0.81\) Search vendor "Cisco" for product "Nx-os" and version "7.3\(0\)zn\(0.81\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Nexus 3548 Search vendor "Cisco" for product "Nexus 3548" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Nx-os Search vendor "Cisco" for product "Nx-os" | 7.3\(0\)zn\(0.81\) Search vendor "Cisco" for product "Nx-os" and version "7.3\(0\)zn\(0.81\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Nexus 93120tx Search vendor "Cisco" for product "Nexus 93120tx" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Nx-os Search vendor "Cisco" for product "Nx-os" | 7.3\(0\)zn\(0.81\) Search vendor "Cisco" for product "Nx-os" and version "7.3\(0\)zn\(0.81\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Nexus 93128tx Search vendor "Cisco" for product "Nexus 93128tx" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Nx-os Search vendor "Cisco" for product "Nx-os" | 7.3\(0\)zn\(0.81\) Search vendor "Cisco" for product "Nx-os" and version "7.3\(0\)zn\(0.81\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Nexus 9332pq Search vendor "Cisco" for product "Nexus 9332pq" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Nx-os Search vendor "Cisco" for product "Nx-os" | 7.3\(0\)zn\(0.81\) Search vendor "Cisco" for product "Nx-os" and version "7.3\(0\)zn\(0.81\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Nexus 9336pq Aci Spine Search vendor "Cisco" for product "Nexus 9336pq Aci Spine" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Nx-os Search vendor "Cisco" for product "Nx-os" | 7.3\(0\)zn\(0.81\) Search vendor "Cisco" for product "Nx-os" and version "7.3\(0\)zn\(0.81\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Nexus 9372px Search vendor "Cisco" for product "Nexus 9372px" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Nx-os Search vendor "Cisco" for product "Nx-os" | 7.3\(0\)zn\(0.81\) Search vendor "Cisco" for product "Nx-os" and version "7.3\(0\)zn\(0.81\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Nexus 9372tx Search vendor "Cisco" for product "Nexus 9372tx" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Nx-os Search vendor "Cisco" for product "Nx-os" | 7.3\(0\)zn\(0.81\) Search vendor "Cisco" for product "Nx-os" and version "7.3\(0\)zn\(0.81\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Nexus 9396px Search vendor "Cisco" for product "Nexus 9396px" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Nx-os Search vendor "Cisco" for product "Nx-os" | 7.3\(0\)zn\(0.81\) Search vendor "Cisco" for product "Nx-os" and version "7.3\(0\)zn\(0.81\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Nexus 9396tx Search vendor "Cisco" for product "Nexus 9396tx" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Nx-os Search vendor "Cisco" for product "Nx-os" | 7.3\(0\)zn\(0.81\) Search vendor "Cisco" for product "Nx-os" and version "7.3\(0\)zn\(0.81\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Nexus 9504 Search vendor "Cisco" for product "Nexus 9504" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Nx-os Search vendor "Cisco" for product "Nx-os" | 7.3\(0\)zn\(0.81\) Search vendor "Cisco" for product "Nx-os" and version "7.3\(0\)zn\(0.81\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Nexus 9508 Search vendor "Cisco" for product "Nexus 9508" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Nx-os Search vendor "Cisco" for product "Nx-os" | 7.3\(0\)zn\(0.81\) Search vendor "Cisco" for product "Nx-os" and version "7.3\(0\)zn\(0.81\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Nexus 9516 Search vendor "Cisco" for product "Nexus 9516" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Nx-os Search vendor "Cisco" for product "Nx-os" | 7.3\(0\)zn\(0.81\) Search vendor "Cisco" for product "Nx-os" and version "7.3\(0\)zn\(0.81\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Nexus 1000v Search vendor "Cisco" for product "Nexus 1000v" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Nx-os Search vendor "Cisco" for product "Nx-os" | 4.1\(2\)e1\(1c\) Search vendor "Cisco" for product "Nx-os" and version "4.1\(2\)e1\(1c\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Nexus 4001i Search vendor "Cisco" for product "Nexus 4001i" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Nx-os Search vendor "Cisco" for product "Nx-os" | 7.2\(0\)n1\(0.1\) Search vendor "Cisco" for product "Nx-os" and version "7.2\(0\)n1\(0.1\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Nexus 7000 Search vendor "Cisco" for product "Nexus 7000" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Nx-os Search vendor "Cisco" for product "Nx-os" | 7.2\(0\)n1\(0.1\) Search vendor "Cisco" for product "Nx-os" and version "7.2\(0\)n1\(0.1\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Nexus 7700 Search vendor "Cisco" for product "Nexus 7700" | - | - |
Safe
|