A denial of service (DoS) vulnerability exists in Cisco NX-OS Software due to allocating and freeing memory buffers in the network stack. An unauthenticated, remote attacker can exploit this issue by sending crafted TCP streams to an affected device in a sustained way. If the attacker is succesful then this will result in the network stack running out of available buffers, thus impairing operations of the control plane and management plane protocols.

Please see the included Cisco BIDs and Cisco Security Advisory for more information

Cisco NX-OSソフトウェアに、ネットワークスタックでのメモリバッファの割り当てと解放が原因の、サービス拒否（DoS）の脆弱性があります。認証されていないリモート攻撃者がこの問題を悪用し、細工されたTCPストリームを影響を受けるデバイスに持続的に送信する可能性があります。攻撃が成功すると、ネットワークスタックで利用可能なバッファが不足し、コントロールプレーンと管理プレーンのプロトコルの操作が損なわれます。

詳細については、付属のCisco BIDおよびCisco Security Advisoryを参照してください

Cisco NX-OS Software 中存在拒绝服务 (DoS) 漏洞，这是在网络堆栈中分配和释放内存缓冲区所致。未经身份验证的远程攻击者可以通过持续向受影响的设备发送构建的 TCP 流来利用此漏洞。如果攻击者成功，此举将导致网络堆栈耗尽可用缓冲区，从而损害控制平面和管理平面协议的操作。

请参阅随附的 Cisco BID 和 Cisco 安全公告，了解更多信息

Cisco NX-OS 軟體中存在一個拒絕服務 (DoS) 弱點，這是在網路堆疊中配置和釋放記憶體緩衝區所致。未經驗證的遠端攻擊者可利用此問題，持續向受影響的裝置傳送構建的 TCP 資料流。如果攻擊者得逞，此舉將導致網路堆疊耗盡可用緩衝區，進而損害控制平面和管理平面通訊協定的操作。

如需詳細資訊，請參閱隨附的 Cisco BID 和 Cisco 安全性公告

A vulnerability in the network stack of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on the affected device. The vulnerability is due to an issue with allocating and freeing memory buffers in the network stack.
An attacker could exploit this vulnerability by sending crafted TCP streams to an affected device in a sustained way. A successful exploit could cause the network stack of an affected device to run out of available buffers, impairing operations of control plane and management plane protocols, resulting in a DoS condition. Note: This vulnerability can be triggered only by traffic that is destined to an affected device and cannot be exploited using traffic that transits an affected device. Nexus 1000V Switch for Microsoft Hyper-V is affected in versions prior to 5.2(1)SM3(2.1). Nexus 1000V Switch for VMware vSphere is affected in versions prior to 5.2(1)SV3(4.1a). Nexus 3000 Series Switches are affected in versions prior to 7.0(3)I7(6) and 9.2(2). Nexus 3500 Platform Switches are affected in versions prior to 6.0(2)A8(11), 7.0(3)I7(6), and 9.2(2). Nexus 3600 Platform Switches are affected in versions prior to 7.0(3)F3(5) and 9.2(2). Nexus 5500, 5600, and 6000 Series Switches are affected in versions prior to 7.1(5)N1(1b) and 7.3(5)N1(1). Nexus 7000 and 7700 Series Switches are affected in versions prior to 6.2(22. Nexus 9500 R-Series Line Cards and Fabric Modules are affected in versions prior to 7.0(3)F3(5) and 9.2(2). UCS 6200 and 6300 Series Fabric Interconnect are affected in versions prior to 3.2(3j) and 4.0(2a). UCS 6400 Series Fabric Interconnect are affected in versions prior to 4.0(2a).

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

ID	名稱	產品	系列	已發布	已更新	嚴重性
134948	Cisco NX-OS Software Netstack DoS (cisco-sa-20190306-nxos-netstack)	Nessus	CISCO	2020/3/27	2020/3/31	high
134948	Cisco NX-OSソフトウェアのNetstack DoS（cisco-sa-20190306-nxos-netstack）	Nessus	CISCO	2020/3/27	2020/3/31	high
134948	Cisco NX-OS Software Netstack DoS (cisco-sa-20190306-nxos-netstack)	Nessus	CISCO	2020/3/27	2020/3/31	high
134948	Cisco NX-OS 軟體 Netstack DoS (cisco-sa-20190306-nxos-netstack)	Nessus	CISCO	2020/3/27	2020/3/31	high
501396	Cisco NX-OS Software Netstack Denial of Service (CVE-2019-1599)	Tenable OT Security	Tenable.ot	2023/7/25	2023/7/26	high

偵測

搜尋 Plugin

high

high

high

high

high