CVE-2015-0718

Cisco NX-OS 4.0 through 6.1 on Nexus 1000V 3000, 4000, 5000, 6000, and 7000 devices and Unified Computing System (UCS) platforms allows remote attackers to cause a denial of service (TCP stack reload) by sending crafted TCP packets to a device that has a TIME_WAIT TCP session, aka Bug ID CSCub70579.

Score

CVSS 3.0 7.5 High

Status

Modified - psirt@cisco.com

Published

2016-03-03

Last modified

2024-08-06

Weaknesses

CWE-399

Affected products

• Nx-os (Cisco)
• Unified Computing System (Cisco)
• Jr6150 Firmware (Netgear)
• X14j Firmware (Samsung)
• Opensolaris (Sun)
• Gs1900-10hp Firmware (Zyxel)
• Keymouse Firmware (Zzinc)

References

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-netstack
• http://www.securitytracker.com/id/1035159
• http://www.securitytracker.com/id/1035160