CVE-2012-0352: High severity cisco NX-OS vulnerability

Published Feb 16, 2012

Updated

Cisco NX-OS 4.2.x before 4.2(1)SV1(5.1) on Nexus 1000v series switches; 4.x and 5.0.x before 5.0(2)N1(1) on Nexus 5000 series switches; and 4.2.x before 4.2.8, 5.0.x before 5.0.5, and 5.1.x before 5.1.1 on Nexus 7000 series switches allows remote attackers to cause a denial of service (netstack process crash and device reload) via a malformed IP packet, aka Bug IDs CSCti23447, CSCti49507, and CSCtj01991.

Affected Software

65 affected components

cisco NX-OS=4.0\(0\)n1\(1a\)

cisco NX-OS=4.0\(0\)n1\(2\)

cisco NX-OS=4.0\(0\)n1\(2a\)

cisco NX-OS=4.0\(1a\)n1\(1\)

cisco NX-OS=4.0\(1a\)n1\(1a\)

cisco NX-OS=4.0\(1a\)n2\(1\)

cisco NX-OS=4.0\(1a\)n2\(1a\)

cisco NX-OS=4.0\(4\)sv1\(1\)

cisco NX-OS=4.0\(4\)sv1\(2\)

cisco NX-OS=4.0\(4\)sv1\(3\)

cisco NX-OS=4.0\(4\)sv1\(3a\)

cisco NX-OS=4.0\(4\)sv1\(3b\)

cisco NX-OS=4.0\(4\)sv1\(3c\)

cisco NX-OS=4.0\(4\)sv1\(3d\)

cisco NX-OS=4.1\(3\)n1\(1\)

cisco NX-OS=4.1\(3\)n1\(1a\)

cisco NX-OS=4.1\(3\)n2\(1\)

cisco NX-OS=4.1\(3\)n2\(1a\)

cisco NX-OS=4.2\(1\)n1\(1\)

cisco NX-OS=4.2\(1\)n2\(1\)

cisco NX-OS=4.2\(1\)n2\(1a\)

cisco NX-OS=4.2\(1\)sv1\(4\)

cisco NX-OS=4.2\(1\)sv1\(4a\)

cisco Nexus 1000V

cisco NX-OS=5.0\(2\)n2\(1\)

cisco NX-OS=5.0\(2\)n2\(1a\)

cisco NX-OS=5.0\(3\)n1\(1\)

cisco NX-OS=5.0\(3\)n1\(1a\)

cisco NX-OS=5.0\(3\)n1\(1b\)

cisco NX-OS=5.0\(3\)n1\(1c\)

cisco NX-OS=5.0\(3\)n2\(1\)

cisco NX-OS=5.0\(3\)n2\(2\)

cisco NX-OS=5.0\(3\)n2\(2a\)

cisco NX-OS=5.0\(3\)n2\(2b\)

cisco NX-OS=5.1\(3\)n1\(1\)

cisco NX-OS=5.1\(3\)n1\(1a\)

cisco Nexus 5000

cisco Nexus 5010

Cisco Nexus 5020

cisco Nexus 5548p

cisco Nexus 5548up

cisco Nexus 5596up

cisco NX-OS=4.1.\(2\)

cisco NX-OS=4.1.\(3\)

cisco NX-OS=4.1.\(4\)

cisco NX-OS=4.1.\(5\)

cisco NX-OS=4.2\(1\)

cisco NX-OS=4.2\(2\)

cisco NX-OS=4.2\(3\)

cisco NX-OS=4.2\(4\)

cisco NX-OS=4.2\(6\)

cisco NX-OS=4.2.\(2a\)

cisco NX-OS=5.0\(2\)

cisco NX-OS=5.0\(2a\)

cisco NX-OS=5.0\(3\)

cisco NX-OS=5.1\(1a\)

cisco NX-OS=5.1\(2\)

cisco NX-OS=5.1\(3\)

cisco NX-OS=5.1\(4\)

cisco NX-OS=5.1\(5\)

cisco NX-OS=5.1\(6\)

cisco Nexus 7000

cisco Nexus 7000 10-slot

cisco Nexus 7000 18-slot

cisco Nexus 7000 9-slot

Event History

Feb 16, 2012

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2012-0352?

CVE-2012-0352 is rated as high severity due to its potential to cause denial of service.

How do I fix CVE-2012-0352?

To fix CVE-2012-0352, upgrade to the recommended versions of Cisco NX-OS specified in the advisory.

What systems are affected by CVE-2012-0352?

CVE-2012-0352 affects Cisco NX-OS versions prior to the specific fixed releases on Nexus 1000v, 5000, and 7000 series switches.

Can CVE-2012-0352 be exploited remotely?

Yes, CVE-2012-0352 can be exploited remotely by sending crafted packets.

What is the impact of CVE-2012-0352 on system availability?

The impact of CVE-2012-0352 is a denial of service, which results in the affected systems being unavailable.

CVE-2012-0352: High severity cisco NX-OS vulnerability

Affected Software

Event History

Don't miss critical vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2012-0352?

How do I fix CVE-2012-0352?

What systems are affected by CVE-2012-0352?

Can CVE-2012-0352 be exploited remotely?

What is the impact of CVE-2012-0352 on system availability?

Company

Resources

Contact