CVE-2016-1453 Buffer overflow in the Overlay Transport Virtualization (OTV) GRE feature in Cisco NX-OS 5.0 through 7.3 on Nexus 7000 and 7700 devices allows remote attackers to execute arbitrary code via long param...
CriticalCVSS 9.8
EPSS 8.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the Overlay Transport Virtualization (OTV) GRE feature in Cisco NX-OS 5.0 through 7.3 on Nexus 7000 and 7700 devices allows remote attackers to execute arbitrary code via long parameters in a packet header, aka Bug ID CSCuy95701.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco nx-os | = 4.1.(2) | No fix listed |
| cisco nx-os | = 4.1.(3) | No fix listed |
| cisco nx-os | = 4.1.(4) | No fix listed |
| cisco nx-os | = 4.1.(5) | No fix listed |
| cisco nx-os | = 4.2(3) | No fix listed |
| cisco nx-os | = 4.2(4) | No fix listed |
| cisco nx-os | = 4.2(6) | No fix listed |
| cisco nx-os | = 4.2(8) | No fix listed |
| cisco nx-os | = 4.2.(2a) | No fix listed |
| cisco nx-os | = 5.0(2a) | No fix listed |
| cisco nx-os | = 5.0(3) | No fix listed |
| cisco nx-os | = 5.0(5) | No fix listed |
| cisco nx-os | = 5.1(1) | No fix listed |
| cisco nx-os | = 5.1(1a) | No fix listed |
| cisco nx-os | = 5.1(3) | No fix listed |
| cisco nx-os | = 5.1(4) | No fix listed |
| cisco nx-os | = 5.1(5) | No fix listed |
| cisco nx-os | = 5.1(6) | No fix listed |
| cisco nx-os | = 5.2(1) | No fix listed |
| cisco nx-os | = 5.2(3a) | No fix listed |
| cisco nx-os | = 5.2(4) | No fix listed |
| cisco nx-os | = 5.2(5) | No fix listed |
| cisco nx-os | = 5.2(7) | No fix listed |
| cisco nx-os | = 5.2(9) | No fix listed |
| cisco nx-os | = 6.0(1) | No fix listed |
Show 21 more
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco nx-os | = 6.0(2) | No fix listed |
| cisco nx-os | = 6.0(3) | No fix listed |
| cisco nx-os | = 6.0(4) | No fix listed |
| cisco nx-os | = 6.1(1) | No fix listed |
| cisco nx-os | = 6.1(2) | No fix listed |
| cisco nx-os | = 6.1(3) | No fix listed |
| cisco nx-os | = 6.1(4) | No fix listed |
| cisco nx-os | = 6.1(4a) | No fix listed |
| cisco nx-os | = 6.1(5) | No fix listed |
| cisco nx-os | = 6.2(2) | No fix listed |
| cisco nx-os | = 6.2(2a) | No fix listed |
| cisco nx-os | = 6.2(6) | No fix listed |
| cisco nx-os | = 6.2(6b) | No fix listed |
| cisco nx-os | = 6.2(8) | No fix listed |
| cisco nx-os | = 6.2(8a) | No fix listed |
| cisco nx-os | = 6.2(8b) | No fix listed |
| cisco nx-os | = 6.2(10) | No fix listed |
| cisco nx-os | = 6.2(12) | No fix listed |
| cisco nx-os | = 6.2(14)s1 | No fix listed |
| cisco nx-os | = 7.2(0)n1(0.1) | No fix listed |
| cisco nx-os | = base | No fix listed |
References
- 20161005 Cisco Nexus 7000 and 7700 Series Switches Overlay Transport Virtualization Buffer Overflow Vulnerability mitigation vendor-advisory
- 93409 not-applicable third-party-advisory vdb-entry
- 1036946 not-applicable third-party-advisory vdb-entry