Vulnerabilities > CVE-2012-0352 - Resource Management Errors vulnerability in Cisco products

CVSS 7.8 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

COMPLETE

network

low complexity

cisco

CWE-399

NVD

Published: 2012-02-16

Updated: 2012-02-17

Summary

Cisco NX-OS 4.2.x before 4.2(1)SV1(5.1) on Nexus 1000v series switches; 4.x and 5.0.x before 5.0(2)N1(1) on Nexus 5000 series switches; and 4.2.x before 4.2.8, 5.0.x before 5.0.5, and 5.1.x before 5.1.1 on Nexus 7000 series switches allows remote attackers to cause a denial of service (netstack process crash and device reload) via a malformed IP packet, aka Bug IDs CSCti23447, CSCti49507, and CSCtj01991.

Vulnerable Configurations

Part	Description	Count
OS	Cisco Cisco NX OS 4.0\(0\)N1\(1A\) Cisco NX OS 4.0\(0\)N1\(2\) Cisco NX OS 4.0\(0\)N1\(2A\) Cisco NX OS 4.0\(1A\)N1\(1\) Cisco NX OS 4.0\(1A\)N1\(1A\) Cisco NX OS 4.0\(1A\)N2\(1\) Cisco NX OS 4.0\(1A\)N2\(1A\) Cisco NX OS 4.0\(4\)Sv1\(1\) Cisco NX OS 4.0\(4\)Sv1\(2\) Cisco NX OS 4.0\(4\)Sv1\(3\) Cisco NX OS 4.0\(4\)Sv1\(3A\) Cisco NX OS 4.0\(4\)Sv1\(3B\) Cisco NX OS 4.0\(4\)Sv1\(3C\) Cisco NX OS 4.0\(4\)Sv1\(3D\) Cisco NX OS 4.1\(3\)N1\(1\) Cisco NX OS 4.1\(3\)N1\(1A\) Cisco NX OS 4.1\(3\)N2\(1\) Cisco NX OS 4.1\(3\)N2\(1A\) Cisco NX OS 4.2\(1\)N1\(1\) Cisco NX OS 4.2\(1\)N2\(1\) Cisco NX OS 4.2\(1\)N2\(1A\) Cisco NX OS 4.2\(1\)Sv1\(4\) Cisco NX OS 4.2\(1\)Sv1\(4A\) Cisco NX OS 5.0\(2\)N2\(1\) Cisco NX OS 5.0\(2\)N2\(1A\) Cisco NX OS 5.0\(3\)N1\(1\) Cisco NX OS 5.0\(3\)N1\(1A\) Cisco NX OS 5.0\(3\)N1\(1B\) Cisco NX OS 5.0\(3\)N1\(1C\) Cisco NX OS 5.0\(3\)N2\(1\) Cisco NX OS 5.0\(3\)N2\(2\) Cisco NX OS 5.0\(3\)N2\(2A\) Cisco NX OS 5.0\(3\)N2\(2B\) Cisco NX OS 5.1\(3\)N1\(1\) Cisco NX OS 5.1\(3\)N1\(1A\) Cisco NX OS 4.1.\(2\) Cisco NX OS 4.1.\(3\) Cisco NX OS 4.1.\(4\) Cisco NX OS 4.1.\(5\) Cisco NX OS 4.2\(1\) Cisco NX OS 4.2\(2\) Cisco NX OS 4.2\(3\) Cisco NX OS 4.2\(4\) Cisco NX OS 4.2\(6\) Cisco NX OS 4.2.\(2A\) Cisco NX OS 5.0\(2\) Cisco NX OS 5.0\(2A\) Cisco NX OS 5.0\(3\) Cisco NX OS 5.1\(1A\) Cisco NX OS 5.1\(2\) Cisco NX OS 5.1\(3\) Cisco NX OS 5.1\(4\) Cisco NX OS 5.1\(5\) Cisco NX OS 5.1\(6\)	54
Hardware	Cisco Cisco Nexus 1000V - Cisco Nexus 5000 - Cisco Nexus 5010 - Cisco Nexus 5020 - Cisco Nexus 5548P - Cisco Nexus 5548Up - Cisco Nexus 5596Up - Cisco Nexus 7000 - Cisco Nexus 7000 10 Slot - Cisco Nexus 7000 18 Slot - Cisco Nexus 7000 9 Slot -	11

Common Weakness Enumeration (CWE)

CWE-399 - Resource Management Errors

Seebug

bulletinFamily	exploit
description	Bugtraq ID: 52027 CVE ID：CVE-2012-0352 Cisco Nexus系列交换机是数据中心级交换机。采用Cisco Nexus OS操作系统当操作系统IP栈处理畸形IP报文和从报文中获取第四层(UDP或TCP)信息时Cisco NX-OS软件受拒绝服务漏洞影响，可导致运行受此漏洞影响软件的Cisco Nexus 1000v, 5000和7000系列交换机重载通过设备（过境）通信和到设备的通信都能触发此漏洞 0 Cisco Nexus 7000 Cisco Nexus 5000 Cisco Nexus 1000V 厂商解决方案 Cisco ----- 用户可参考如下供应商提供的安全公告获得补丁信息： http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120215-nxos
id	SSV:30128
last seen	2017-11-19
modified	2012-02-16
published	2012-02-16
reporter	Root
title	Cisco Nexus设备IP栈远程拒绝服务漏洞

References

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120215-nxos