CVE-2013-1210

Array index error in the Virtual Ethernet Module (VEM) kernel driver for VMware ESXi in Cisco NX-OS on the Nexus 1000V, when STUN debugging is enabled, allows remote attackers to cause a denial of service (ESXi crash and purple screen of death) by sending crafted STUN packets to a VEM, aka Bug ID CSCud14825.

Score

CVSS 2.0 5.4 Medium

Status

Modified - psirt@cisco.com

Published

2013-05-29

Last modified

2024-09-16

Weaknesses

CWE-119

Affected products

• Nx-os (Cisco)

References

• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1210