CVE-2014-3261: Buffer Overflow
Published May 24, 2014
·Updated
Buffer overflow in the Smart Call Home implementation in Cisco NX-OS on Fabric Interconnects in Cisco Unified Computing System 1.4 before 1.4(1i), NX-OS 5.0 before 5.0(3)U2(2) on Nexus 3000 devices, NX-OS 4.1 before 4.1(2)E1(1l) on Nexus 4000 devices, NX-OS 5.x before 5.1(3)N1(1) on Nexus 5000 devices, NX-OS 5.2 before 5.2(3a) on Nexus 7000 devices, and CG-OS CG4 before CG4(2) on Connected 1000 Connected Grid Routers allows remote SMTP servers to execute arbitrary code via a crafted reply, aka Bug IDs CSCtk00695, CSCts56633, CSCts56632, CSCts56628, CSCug14405, and CSCuf61322.
Affected Software
167 affected components
Cisco Unified Computing System 6120xp Fabric Interconnect
Cisco Unified Computing System 6140xp Fabric Interconnect
Cisco Unified Computing System 6248up Fabric Interconnect
Cisco Unified Computing System 6296up Fabric Interconnect
Cisco Unified Computing System Infrastructure And Unified Computing System Software=1.4\(1j\)
Cisco CG-OS=cg4
Cisco CG-OS=cg4\(1\)
Cisco Cgr 1120
Cisco Cgr 1240
Cisco NX-OS=5.2
Cisco NX-OS=5.2\(1\)
Cisco NX-OS=5.2\(3\)
Cisco Nexus 7000
Cisco Nexus 7000 10-slot
Cisco Nexus 7000 18-slot
Cisco Nexus 7000 9-slot
Cisco NX-OS
Cisco NX-OS=5.0
Cisco NX-OS=5.0\(2\)
Cisco NX-OS=5.0\(2\)n1\(1\)
Cisco NX-OS=5.0\(2\)n2\(1\)
Cisco NX-OS=5.0\(2\)n2\(1a\)
Cisco NX-OS=5.0\(2a\)
Cisco NX-OS=5.0\(3\)
Cisco NX-OS=5.0\(3\)n1\(1\)
Cisco NX-OS=5.0\(3\)n1\(1a\)
Cisco NX-OS=5.0\(3\)n1\(1b\)
Cisco NX-OS=5.0\(3\)n1\(1c\)
Cisco NX-OS=5.0\(3\)n2\(1\)
Cisco NX-OS=5.0\(3\)n2\(2\)
Cisco NX-OS=5.0\(3\)n2\(2a\)
Cisco NX-OS=5.0\(3\)n2\(2b\)
Cisco NX-OS=5.0\(3\)u1\(1a\)
Cisco NX-OS=5.0\(3\)u1\(1b\)
Cisco NX-OS=5.0\(3\)u1\(1d\)
Cisco NX-OS=5.0\(3\)u1\(2\)
Cisco NX-OS=5.0\(3\)u1\(2a\)
Cisco NX-OS=5.0\(3\)u2\(1\)
Cisco Nexus 3016q
Cisco Nexus 3048
Cisco Nexus 3064t
Cisco Nexus 3064x
Cisco Nexus 3548
Cisco NX-OS=5.0\(3\)u2\(2\)
Cisco NX-OS=5.0\(3\)u2\(2a\)
Cisco NX-OS=5.0\(3\)u2\(2b\)
Cisco NX-OS=5.0\(3\)u2\(2c\)
Cisco NX-OS=5.0\(3\)u2\(2d\)
Cisco NX-OS=5.0\(3\)u3\(1\)
Cisco NX-OS=5.0\(3\)u3\(2\)
Cisco NX-OS=5.0\(3\)u3\(2a\)
Cisco NX-OS=5.0\(3\)u3\(2b\)
Cisco NX-OS=5.0\(3\)u4\(1\)
Cisco NX-OS=5.0\(3\)u5\(1\)
Cisco NX-OS=5.0\(3\)u5\(1a\)
Cisco NX-OS=5.0\(3\)u5\(1b\)
Cisco NX-OS=5.0\(3\)u5\(1c\)
Cisco NX-OS=5.0\(3\)u5\(1d\)
Cisco NX-OS=5.0\(3\)u5\(1e\)
Cisco NX-OS=5.0\(5\)
Cisco NX-OS=5.1
Cisco NX-OS=5.1\(1\)
Cisco NX-OS=5.1\(1a\)
Cisco NX-OS=5.1\(2\)
Cisco NX-OS=5.1\(3\)
Cisco Nexus 5000
Cisco Nexus 5010
Cisco Nexus 5010p Switch
Cisco Nexus 5020
Cisco Nexus 5020p Switch
Cisco Nexus 5548p
Cisco Nexus 5548up
Cisco Nexus 5596up
Cisco NX-OS=4.1.\(2\)
Cisco Nexus 4001i
All of the following
Any of the following
Cisco CG-OS=cg4
Cisco CG-OS=cg4\(1\)
Any of the following
Cisco Cgr 1120
Cisco Cgr 1240
All of the following
Any of the following
Cisco NX-OS=5.2
Cisco NX-OS=5.2\(1\)
Cisco NX-OS=5.2\(3\)
Any of the following
Cisco Nexus 7000
Cisco Nexus 7000 10-slot
Cisco Nexus 7000 18-slot
Cisco Nexus 7000 9-slot
All of the following
Any of the following
Cisco NX-OS
Cisco NX-OS=5.0
Cisco NX-OS=5.0\(2\)
Cisco NX-OS=5.0\(2\)n1\(1\)
Cisco NX-OS=5.0\(2\)n2\(1\)
Cisco NX-OS=5.0\(2\)n2\(1a\)
Cisco NX-OS=5.0\(2a\)
Cisco NX-OS=5.0\(3\)
Cisco NX-OS=5.0\(3\)n1\(1\)
Cisco NX-OS=5.0\(3\)n1\(1a\)
Cisco NX-OS=5.0\(3\)n1\(1b\)
Cisco NX-OS=5.0\(3\)n1\(1c\)
Cisco NX-OS=5.0\(3\)n2\(1\)
Cisco NX-OS=5.0\(3\)n2\(2\)
Cisco NX-OS=5.0\(3\)n2\(2a\)
Cisco NX-OS=5.0\(3\)n2\(2b\)
Cisco NX-OS=5.0\(3\)u1\(1a\)
Cisco NX-OS=5.0\(3\)u1\(1b\)
Cisco NX-OS=5.0\(3\)u1\(1d\)
Cisco NX-OS=5.0\(3\)u1\(2\)
Cisco NX-OS=5.0\(3\)u1\(2a\)
Cisco NX-OS=5.0\(3\)u2\(1\)
Cisco Unified Computing System Infrastructure And Unified Computing System Software=1.4\(1j\)
Any of the following
Cisco Nexus 3016q
Cisco Nexus 3048
Cisco Nexus 3064t
Cisco Nexus 3064x
Cisco Nexus 3548
All of the following
Any of the following
Cisco NX-OS=5.0
Cisco NX-OS=5.0\(2\)
Cisco NX-OS=5.0\(2\)n1\(1\)
Cisco NX-OS=5.0\(2\)n2\(1\)
Cisco NX-OS=5.0\(2\)n2\(1a\)
Cisco NX-OS=5.0\(2a\)
Cisco NX-OS=5.0\(3\)
Cisco NX-OS=5.0\(3\)n1\(1\)
Cisco NX-OS=5.0\(3\)n1\(1a\)
Cisco NX-OS=5.0\(3\)n1\(1b\)
Cisco NX-OS=5.0\(3\)n1\(1c\)
Cisco NX-OS=5.0\(3\)n2\(1\)
Cisco NX-OS=5.0\(3\)n2\(2\)
Cisco NX-OS=5.0\(3\)n2\(2a\)
Cisco NX-OS=5.0\(3\)n2\(2b\)
Cisco NX-OS=5.0\(3\)u1\(1a\)
Cisco NX-OS=5.0\(3\)u1\(1b\)
Cisco NX-OS=5.0\(3\)u1\(1d\)
Cisco NX-OS=5.0\(3\)u1\(2\)
Cisco NX-OS=5.0\(3\)u1\(2a\)
Cisco NX-OS=5.0\(3\)u2\(1\)
Cisco NX-OS=5.0\(3\)u2\(2\)
Cisco NX-OS=5.0\(3\)u2\(2a\)
Cisco NX-OS=5.0\(3\)u2\(2b\)
Cisco NX-OS=5.0\(3\)u2\(2c\)
Cisco NX-OS=5.0\(3\)u2\(2d\)
Cisco NX-OS=5.0\(3\)u3\(1\)
Cisco NX-OS=5.0\(3\)u3\(2\)
Cisco NX-OS=5.0\(3\)u3\(2a\)
Cisco NX-OS=5.0\(3\)u3\(2b\)
Cisco NX-OS=5.0\(3\)u4\(1\)
Cisco NX-OS=5.0\(3\)u5\(1\)
Cisco NX-OS=5.0\(3\)u5\(1a\)
Cisco NX-OS=5.0\(3\)u5\(1b\)
Cisco NX-OS=5.0\(3\)u5\(1c\)
Cisco NX-OS=5.0\(3\)u5\(1d\)
Cisco NX-OS=5.0\(3\)u5\(1e\)
Cisco NX-OS=5.0\(5\)
Cisco NX-OS=5.1
Cisco NX-OS=5.1\(1\)
Cisco NX-OS=5.1\(1a\)
Cisco NX-OS=5.1\(2\)
Cisco NX-OS=5.1\(3\)
Any of the following
Cisco Nexus 5000
Cisco Nexus 5010
Cisco Nexus 5010p Switch
Cisco Nexus 5020
Cisco Nexus 5020p Switch
Cisco Nexus 5548p
Cisco Nexus 5548up
Cisco Nexus 5596up
All of the following
Cisco NX-OS=4.1.\(2\)
Cisco Nexus 4001i
Event History
May 24, 2014
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
May 26, 2014
Data Sourced
via NVD·12:25 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-3261?
CVE-2014-3261 has a high severity rating due to its potential for remote code execution through a buffer overflow.
2
How do I fix CVE-2014-3261?
To fix CVE-2014-3261, upgrade affected Cisco NX-OS devices to the recommended versions provided in the Cisco security advisory.
3
What products are affected by CVE-2014-3261?
CVE-2014-3261 affects various Cisco NX-OS devices including the Nexus 3000, 4000, and 5000 series along with the Unified Computing System Fabric Interconnects.
4
What type of vulnerability is CVE-2014-3261?
CVE-2014-3261 is categorized as a buffer overflow vulnerability in the Smart Call Home functionality.
5
Can CVE-2014-3261 be exploited remotely?
Yes, CVE-2014-3261 can be exploited remotely, making it critical to apply patches and updates promptly.