CVE-2016-1465
Last modified
CVE-2016-1465 is a vulnerability of currently unknown severity. Cisco Nexus 1000v Application Virtual Switch (AVS) devices before 5.2(1)SV3(1.5i) allow remote attackers to cause a denial of service (ESXi hypervisor crash and purple screen) via a crafted Cisco Discovery Protocol packet that triggers an out-of-bounds memory access, aka Bug ID CSCuw57985.. EPSS estimates a 0.93% chance of exploitation in the next 30 days.
Description
Cisco Nexus 1000v Application Virtual Switch (AVS) devices before 5.2(1)SV3(1.5i) allow remote attackers to cause a denial of service (ESXi hypervisor crash and purple screen) via a crafted Cisco Discovery Protocol packet that triggers an out-of-bounds memory access, aka Bug ID CSCuw57985.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Nx-Os | 4.0\(4\)sv1\(1\) |
| Cisco | Nx-Os | 4.0\(4\)sv1\(2\) |
| Cisco | Nx-Os | 4.0\(4\)sv1\(3\) |
| Cisco | Nx-Os | 4.0\(4\)sv1\(3a\) |
| Cisco | Nx-Os | 4.0\(4\)sv1\(3b\) |
| Cisco | Nx-Os | 4.0\(4\)sv1\(3c\) |
| Cisco | Nx-Os | 4.0\(4\)sv1\(3d\) |
| Cisco | Nx-Os | 4.2\(1\)sv1\(4\) |
| Cisco | Nx-Os | 4.2\(1\)sv1\(4a\) |
| Cisco | Nx-Os | 4.2\(1\)sv1\(4b\) |
| Cisco | Nx-Os | 4.2\(1\)sv1\(5.1\) |
| Cisco | Nx-Os | 4.2\(1\)sv1\(5.1a\) |
| Cisco | Nx-Os | 4.2\(1\)sv1\(5.2\) |
| Cisco | Nx-Os | 4.2\(1\)sv1\(5.2b\) |
| Cisco | Nx-Os | 4.2\(1\)sv2\(1.1\) |
| Cisco | Nx-Os | 4.2\(1\)sv2\(1.1a\) |
| Cisco | Nx-Os | 4.2\(1\)sv2\(2.1\) |
| Cisco | Nx-Os | 4.2\(1\)sv2\(2.1a\) |
| Cisco | Nx-Os | 5.2\(1\)sv3\(1.1\) |
| Cisco | Nx-Os | 5.2\(1\)sv3\(1.3\) |
| Cisco | Nx-Os | 5.2\(1\)sv3\(1.4\) |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2016-1465?
How severe is CVE-2016-1465?
How do I fix CVE-2016-1465?
Are you affected by CVE-2016-1465?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST