Details of VAR-201611-0388

ID

VAR-201611-0388

CVE

CVE-2016-6457

TITLE

Cisco ACI for Nexus 9000 Series platform Reef Service disruption in switches (DoS) Vulnerabilities

Trust: 0.8

sources: JVNDB: JVNDB-2016-005906

DESCRIPTION

A vulnerability in the Cisco Nexus 9000 Series Platform Leaf Switches for Application Centric Infrastructure (ACI) could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on the affected device. This vulnerability affects Cisco Nexus 9000 Series Leaf Switches (TOR) - ACI Mode and Cisco Application Policy Infrastructure Controller (APIC). More Information: CSCuy93241. Known Affected Releases: 11.2(2x) 11.2(3x) 11.3(1x) 11.3(2x) 12.0(1x). Known Fixed Releases: 11.2(2i) 11.2(2j) 11.2(3f) 11.2(3g) 11.2(3h) 11.2(3l) 11.3(0.236) 11.3(1j) 11.3(2i) 11.3(2j) 12.0(1r). Vendors have confirmed this vulnerability Bug ID CSCuy93241 It is released as.Denial of service by an attacker on an adjacent network (DoS) There is a possibility of being put into a state. An attacker can exploit this issue to cause a denial-of-service condition. This issue is being tracked by Cisco Bug IDCSCuy93241

Trust: 1.98

sources: NVD: CVE-2016-6457 // JVNDB: JVNDB-2016-005906 // BID: 94077 // VULHUB: VHN-95277

AFFECTED PRODUCTS

vendor:	cisco	model:	application policy infrastructure controller	scope:	eq	version:	1.3\(1\)	Trust: 1.6
vendor:	cisco	model:	nx-os	scope:	eq	version:	12.0\(1p\)	Trust: 1.6
vendor:	cisco	model:	application policy infrastructure controller	scope:	eq	version:	2.0\(1\)	Trust: 1.6
vendor:	cisco	model:	nx-os	scope:	eq	version:	11.3\(2f\)	Trust: 1.6
vendor:	cisco	model:	nx-os	scope:	eq	version:	11.2\(2i\)	Trust: 1.6
vendor:	cisco	model:	application policy infrastructure controller	scope:	eq	version:	1.2\(3\)	Trust: 1.6
vendor:	cisco	model:	nx-os	scope:	eq	version:	11.2\(3h\)	Trust: 1.6
vendor:	cisco	model:	nx-os	scope:	eq	version:	11.2\(2h\)	Trust: 1.6
vendor:	cisco	model:	nx-os	scope:	eq	version:	12.0\(1q\)	Trust: 1.6
vendor:	cisco	model:	nx-os	scope:	eq	version:	11.2\(3c\)	Trust: 1.6
vendor:	cisco	model:	nx-os	scope:	eq	version:	11.2\(2g\)	Trust: 1.0
vendor:	cisco	model:	nx-os	scope:	eq	version:	11.3\(1i\)	Trust: 1.0
vendor:	cisco	model:	nx-os	scope:	eq	version:	12.0\(1m\)	Trust: 1.0
vendor:	cisco	model:	nx-os	scope:	eq	version:	11.3\(2h\)	Trust: 1.0
vendor:	cisco	model:	application policy infrastructure controller	scope:	eq	version:	1.3\(2\)	Trust: 1.0
vendor:	cisco	model:	application policy infrastructure controller	scope:	eq	version:	1.2\(2\)	Trust: 1.0
vendor:	cisco	model:	nx-os	scope:	eq	version:	11.3\(2i\)	Trust: 1.0
vendor:	cisco	model:	nx-os	scope:	eq	version:	11.2\(3e\)	Trust: 1.0
vendor:	cisco	model:	nx-os	scope:	eq	version:	12.0\(1o\)	Trust: 1.0
vendor:	cisco	model:	nx-os	scope:	eq	version:	12.0\(1n\)	Trust: 1.0
vendor:	cisco	model:	application policy infrastructure controller software	scope:	-	version:	-	Trust: 0.8
vendor:	cisco	model:	nexus 9000 series	scope:	eq	version:	reef switch (tor)	Trust: 0.8
vendor:	cisco	model:	nx-os	scope:	-	version:	-	Trust: 0.8
vendor:	cisco	model:	nexus series leaf switches aci mode	scope:	eq	version:	9000-0	Trust: 0.3
vendor:	cisco	model:	application policy infrastructure controller	scope:	eq	version:	0	Trust: 0.3

sources: BID: 94077 // JVNDB: JVNDB-2016-005906 // CNNVD: CNNVD-201611-021 // NVD: CVE-2016-6457

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2016-6457
value:	MEDIUM
Trust: 1.0
NVD:	CVE-2016-6457
value:	MEDIUM
Trust: 0.8
CNNVD:	CNNVD-201611-021
value:	MEDIUM
Trust: 0.6
VULHUB:	VHN-95277
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2016-6457
severity:	MEDIUM
baseScore:	6.1
vectorString:	AV:A/AC:L/AU:N/C:N/I:N/A:C
accessVector:	ADJACENT_NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	COMPLETE
exploitabilityScore:	6.5
impactScore:	6.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
VULHUB:	VHN-95277
severity:	MEDIUM
baseScore:	6.1
vectorString:	AV:A/AC:L/AU:N/C:N/I:N/A:C
accessVector:	ADJACENT_NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	COMPLETE
exploitabilityScore:	6.5
impactScore:	6.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

nvd@nist.gov:	CVE-2016-6457
baseSeverity:	MEDIUM
baseScore:	6.5
vectorString:	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
attackVector:	ADJACENT
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	HIGH
exploitabilityScore:	2.8
impactScore:	3.6
version:	3.1
Trust: 1.0
NVD:	CVE-2016-6457
baseSeverity:	MEDIUM
baseScore:	6.5
vectorString:	CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
attackVector:	ADJACENT NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	HIGH
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: VULHUB: VHN-95277 // JVNDB: JVNDB-2016-005906 // CNNVD: CNNVD-201611-021 // NVD: CVE-2016-6457

PROBLEMTYPE DATA

problemtype:

CWE-119

Trust: 1.9

sources: VULHUB: VHN-95277 // JVNDB: JVNDB-2016-005906 // NVD: CVE-2016-6457

THREAT TYPE

remote or local

Trust: 0.6

sources: CNNVD: CNNVD-201611-021

TYPE

buffer error

Trust: 0.6

sources: CNNVD: CNNVD-201611-021

CONFIGURATIONS

sources: JVNDB: JVNDB-2016-005906

PATCH

title:	cisco-sa-20161102-n9kapic	url:	https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161102-n9kapic	Trust: 0.8
title:	Cisco Nexus 9000 Series Platform Leaf Switches for Application Centric Infrastructure Remediation measures for denial of service vulnerabilities	url:	http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=65447	Trust: 0.6
title:	Cisco Nexus 9000 Series Platform Leaf Switches for Application Centric Infrastructure Remediation measures for denial of service vulnerabilities	url:	http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=65298	Trust: 0.6

sources: JVNDB: JVNDB-2016-005906 // CNNVD: CNNVD-201611-021

EXTERNAL IDS

db:	NVD	id:	CVE-2016-6457	Trust: 2.8
db:	BID	id:	94077	Trust: 2.0
db:	SECTRACK	id:	1037185	Trust: 1.7
db:	JVNDB	id:	JVNDB-2016-005906	Trust: 0.8
db:	CNNVD	id:	CNNVD-201611-021	Trust: 0.6
db:	VULHUB	id:	VHN-95277	Trust: 0.1

sources: VULHUB: VHN-95277 // BID: 94077 // JVNDB: JVNDB-2016-005906 // CNNVD: CNNVD-201611-021 // NVD: CVE-2016-6457

REFERENCES

url:	https://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-20161102-n9kapic	Trust: 2.0
url:	http://www.securityfocus.com/bid/94077	Trust: 1.7
url:	http://www.securitytracker.com/id/1037185	Trust: 1.7
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2016-6457	Trust: 0.8
url:	http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2016-6457	Trust: 0.8
url:	http://www.cisco.com/	Trust: 0.3

sources: VULHUB: VHN-95277 // BID: 94077 // JVNDB: JVNDB-2016-005906 // CNNVD: CNNVD-201611-021 // NVD: CVE-2016-6457

CREDITS

Cisco

Trust: 0.9

sources: BID: 94077 // CNNVD: CNNVD-201611-021

SOURCES

db:	VULHUB	id:	VHN-95277
db:	BID	id:	94077
db:	JVNDB	id:	JVNDB-2016-005906
db:	CNNVD	id:	CNNVD-201611-021
db:	NVD	id:	CVE-2016-6457

LAST UPDATE DATE

2024-11-23T22:49:13.415000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-95277	date:	2017-07-29T00:00:00
db:	BID	id:	94077	date:	2016-11-24T01:07:00
db:	JVNDB	id:	JVNDB-2016-005906	date:	2016-11-22T00:00:00
db:	CNNVD	id:	CNNVD-201611-021	date:	2021-12-06T00:00:00
db:	NVD	id:	CVE-2016-6457	date:	2024-11-21T02:56:10.163

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-95277	date:	2016-11-19T00:00:00
db:	BID	id:	94077	date:	2016-11-02T00:00:00
db:	JVNDB	id:	JVNDB-2016-005906	date:	2016-11-22T00:00:00
db:	CNNVD	id:	CNNVD-201611-021	date:	2016-11-07T00:00:00
db:	NVD	id:	CVE-2016-6457	date:	2016-11-19T03:03:00.303