Búsqueda de    
Vulnerabilidad   
    Buscar 324607 Descripciones CVE y
146377 Descripciones de Pruebas,
accesos 10,000+ referencias cruzadas.
Pruebas   CVE   Todos  

ID de Prueba:1.3.6.1.4.1.25623.1.0.105700
Categoría:CISCO
Título:Cisco Nexus Operating System Address Resolution Protocol Denial of Service Vulnerability (Cisco-SA-20150814-CVE-2015-4323)
Resumen:A vulnerability in the Address Resolution Protocol (ARP) input; packet processing of the Cisco Nexus Operating System (NX-OS) devices could allow an; unauthenticated, adjacent attacker to cause a denial of service (DoS) condition.
Descripción:Summary:
A vulnerability in the Address Resolution Protocol (ARP) input
packet processing of the Cisco Nexus Operating System (NX-OS) devices could allow an
unauthenticated, adjacent attacker to cause a denial of service (DoS) condition.

Vulnerability Insight:
The vulnerability is due to improper validation of the ARP
packet and the maximum transmission unit (MTU) size, which results in a buffer overflow and could
cause a DoS condition. An attacker could exploit the vulnerability by sending a crafted ARP
packet to the device.

Vulnerability Impact:
An exploit could allow the attacker to cause the device to
become unavailable due to the DoS condition of the ARP module.

Solution:
See the referenced vendor advisory for a solution.

CVSS Score:
6.1

CVSS Vector:
AV:A/AC:L/Au:N/C:N/I:N/A:C

Referencia Cruzada: Common Vulnerability Exposure (CVE) ID: CVE-2015-4323
BugTraq ID: 76367
http://www.securityfocus.com/bid/76367
Cisco Security Advisory: 20150814 Cisco Nexus Operating System Address Resolution Protocol Denial of Service Vulnerability
http://tools.cisco.com/security/center/viewAlert.x?alertId=40469
http://www.securitytracker.com/id/1033321
CopyrightCopyright (C) 2016 Greenbone Networks GmbH

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.

Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.




© 1998-2025 E-Soft Inc. Todos los derechos reservados.