Cisco Nexus 1000v Application Virtual Switch (AVS) devices prior to 5.2(1)SV3(1.5i) allow remote malicious users to cause a denial of service (ESXi hypervisor crash and purple screen) via a crafted Cisco Discovery Protocol packet that triggers an out-of-bounds memory access, aka Bug ID CSCuw57985.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
cisco nx-os 4.0(4)sv1(1) |
||
cisco nx-os 4.0(4)sv1(2) |
||
cisco nx-os 4.0(4)sv1(3) |
||
cisco nx-os 4.0(4)sv1(3a) |
||
cisco nx-os 4.0(4)sv1(3b) |
||
cisco nx-os 4.0(4)sv1(3c) |
||
cisco nx-os 4.0(4)sv1(3d) |
||
cisco nx-os 4.2(1)sv1(4) |
||
cisco nx-os 4.2(1)sv1(4a) |
||
cisco nx-os 4.2(1)sv1(4b) |
||
cisco nx-os 4.2(1)sv1(5.1) |
||
cisco nx-os 4.2(1)sv1(5.1a) |
||
cisco nx-os 4.2(1)sv1(5.2) |
||
cisco nx-os 4.2(1)sv1(5.2b) |
||
cisco nx-os 4.2(1)sv2(1.1) |
||
cisco nx-os 4.2(1)sv2(1.1a) |
||
cisco nx-os 4.2(1)sv2(2.1) |
||
cisco nx-os 4.2(1)sv2(2.1a) |
||
cisco nx-os 5.2(1)sv3(1.1) |
||
cisco nx-os 5.2(1)sv3(1.3) |
||
cisco nx-os 5.2(1)sv3(1.4) |
Vulmon