CVE-2016-1453: Buffer Overflow

Published Oct 6, 2016

Updated

Buffer overflow in the Overlay Transport Virtualization (OTV) GRE feature in Cisco NX-OS 5.0 through 7.3 on Nexus 7000 and 7700 devices allows remote attackers to execute arbitrary code via long parameters in a packet header, aka Bug ID CSCuy95701.

Affected Software

46 affected components

Cisco NX-OS=4.1.\(2\)

Cisco NX-OS=4.1.\(3\)

Cisco NX-OS=4.1.\(4\)

Cisco NX-OS=4.1.\(5\)

Cisco NX-OS=4.2\(3\)

Cisco NX-OS=4.2\(4\)

Cisco NX-OS=4.2\(6\)

Cisco NX-OS=4.2\(8\)

Cisco NX-OS=4.2.\(2a\)

Cisco NX-OS=5.0\(2a\)

Cisco NX-OS=5.0\(3\)

Cisco NX-OS=5.0\(5\)

Cisco NX-OS=5.1\(1\)

Cisco NX-OS=5.1\(1a\)

Cisco NX-OS=5.1\(3\)

Cisco NX-OS=5.1\(4\)

Cisco NX-OS=5.1\(5\)

Cisco NX-OS=5.1\(6\)

Cisco NX-OS=5.2\(1\)

Cisco NX-OS=5.2\(3a\)

Cisco NX-OS=5.2\(4\)

Cisco NX-OS=5.2\(5\)

Cisco NX-OS=5.2\(7\)

Cisco NX-OS=5.2\(9\)

Cisco NX-OS=6.0\(1\)

Cisco NX-OS=6.0\(2\)

Cisco NX-OS=6.0\(3\)

Cisco NX-OS=6.0\(4\)

Cisco NX-OS=6.1\(1\)

Cisco NX-OS=6.1\(2\)

Cisco NX-OS=6.1\(3\)

Cisco NX-OS=6.1\(4\)

Cisco NX-OS=6.1\(4a\)

Cisco NX-OS=6.1\(5\)

Cisco NX-OS=6.2\(2\)

Cisco NX-OS=6.2\(2a\)

Cisco NX-OS=6.2\(6\)

Cisco NX-OS=6.2\(6b\)

Cisco NX-OS=6.2\(8\)

Cisco NX-OS=6.2\(8a\)

Cisco NX-OS=6.2\(8b\)

Cisco NX-OS=6.2\(10\)

Cisco NX-OS=6.2\(12\)

Cisco NX-OS=6.2\(14\)s1

Cisco NX-OS=7.2\(0\)n1\(0.1\)

Cisco NX-OS=base

Event History

Oct 6, 2016

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-1453?

The severity of CVE-2016-1453 is rated as critical due to its potential to allow remote attackers to execute arbitrary code.

How do I fix CVE-2016-1453?

To fix CVE-2016-1453, upgrade the Cisco NX-OS to a version that is not affected by this vulnerability.

Which versions of Cisco NX-OS are affected by CVE-2016-1453?

CVE-2016-1453 affects Cisco NX-OS versions 5.0 through 7.3 on Nexus 7000 and 7700 devices.

What kind of attack is possible due to CVE-2016-1453?

CVE-2016-1453 allows remote attackers to exploit a buffer overflow vulnerability through crafted packet headers.

Has any exploit been publicly available for CVE-2016-1453?

Yes, there are reports of public exploits that leverage the vulnerability in CVE-2016-1453, emphasizing the need for immediate patching.

CVE-2016-1453: Buffer Overflow

Affected Software

Event History

Don't miss critical vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2016-1453?

How do I fix CVE-2016-1453?

Which versions of Cisco NX-OS are affected by CVE-2016-1453?

What kind of attack is possible due to CVE-2016-1453?

Has any exploit been publicly available for CVE-2016-1453?

Company

Resources

Contact