CVE-2016-6457: Buffer Overflow

Published Nov 19, 2016

Updated

A vulnerability in the Cisco Nexus 9000 Series Platform Leaf Switches for Application Centric Infrastructure (ACI) could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on the affected device. This vulnerability affects Cisco Nexus 9000 Series Leaf Switches (TOR) - ACI Mode and Cisco Application Policy Infrastructure Controller (APIC). More Information: CSCuy93241. Known Affected Releases: 11.2(2x) 11.2(3x) 11.3(1x) 11.3(2x) 12.0(1x). Known Fixed Releases: 11.2(2i) 11.2(2j) 11.2(3f) 11.2(3g) 11.2(3h) 11.2(3l) 11.3(0.236) 11.3(1j) 11.3(2i) 11.3(2j) 12.0(1r).

Affected Software

37 affected components

Cisco Application Policy Infrastructure Controller=1.2\(2\)

Cisco Application Policy Infrastructure Controller=1.2\(3\)

Cisco Application Policy Infrastructure Controller=1.3\(1\)

Cisco Application Policy Infrastructure Controller=1.3\(2\)

Cisco Application Policy Infrastructure Controller=2.0\(1\)

Cisco NX-OS=11.2\(2g\)

Cisco NX-OS=11.2\(2h\)

Cisco NX-OS=11.2\(2i\)

Cisco NX-OS=11.2\(3c\)

Cisco NX-OS=11.2\(3e\)

Cisco NX-OS=11.2\(3h\)

Cisco NX-OS=11.3\(1i\)

Cisco NX-OS=11.3\(2f\)

Cisco NX-OS=11.3\(2h\)

Cisco NX-OS=11.3\(2i\)

Cisco NX-OS=12.0\(1m\)

Cisco NX-OS=12.0\(1n\)

Cisco NX-OS=12.0\(1o\)

Cisco NX-OS=12.0\(1p\)

Cisco NX-OS=12.0\(1q\)

Cisco Nexus 92160yc-x

Cisco Nexus 92304qc

Cisco Nexus 9236c

Cisco Nexus 9272q

Cisco Nexus 93108tc-ex

Cisco Nexus 93120tx

Cisco Nexus 93128tx

Cisco Nexus 93180yc-ex

Cisco Nexus 9332pq

Cisco Nexus 9336pq Aci Spine

Cisco Nexus 9372px

Cisco Nexus 9372tx

Cisco Nexus 9396px

Cisco Nexus 9396tx

Cisco Nexus 9504

Cisco Nexus 9508

Cisco Nexus 9516

Event History

Nov 19, 2016

CVE Published

via MITRE·02:45 AM

Data Sourced

via MITRE·02:45 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2016-6457?

CVE-2016-6457 is rated as high severity, allowing an unauthenticated attacker to cause a denial of service condition.

How do I mitigate CVE-2016-6457?

To mitigate CVE-2016-6457, ensure that your Cisco Nexus 9000 Series devices are updated to the latest software version provided by Cisco.

Which Cisco products are affected by CVE-2016-6457?

CVE-2016-6457 affects various models of Cisco Nexus 9000 Series Leaf Switches and Cisco Application Policy Infrastructure Controllers running specific firmware versions.

Can CVE-2016-6457 be exploited remotely?

CVE-2016-6457 requires an adjacent attacker, meaning exploitation cannot be performed from a remote location.

Is CVE-2016-6457 being actively exploited in the wild?

There is currently no public indication that CVE-2016-6457 is being actively exploited, but it poses a significant risk if not addressed.