CVE-2018-0378

A vulnerability in the Precision Time Protocol (PTP) feature of Cisco Nexus 5500, 5600, and 6000 Series Switches running Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to a lack of protection against PTP frame flood attacks. An attacker could exploit this vulnerability by sending large streams of malicious IPv4 or IPv6 PTP traffic to the affected device. A successful exploit could allow the attacker to cause a DoS condition, impacting the traffic passing through the device.

• CWE-20
• CWE-20

• http://www.securityfocus.com/bid/105669Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1041920Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181017-nexus-ptp-dosVendor Advisory
• http://www.securityfocus.com/bid/105669Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1041920Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181017-nexus-ptp-dosVendor Advisory

Published

Oct 17, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-0372A vulnerability in the DHCPv6 feature of the Cisco Nexus 900…
• CVE-2018-0373A vulnerability in vpnva-6.sys for 32-bit Windows and vpnva6…
• CVE-2018-0374A vulnerability in the Policy Builder database of Cisco Poli…
• CVE-2018-0375A vulnerability in the Cluster Manager of Cisco Policy Suite…
• CVE-2018-0376A vulnerability in the Policy Builder interface of Cisco Pol…
• CVE-2018-0377A vulnerability in the Open Systems Gateway initiative (OSGi…
• CVE-2018-0379Multiple vulnerabilities exist in the Cisco Webex Network Re…
• CVE-2018-0380Multiple vulnerabilities exist in the Cisco Webex Network Re…
• CVE-2018-0381A vulnerability in the Cisco Aironet Series Access Points (A…6.8
• CVE-2018-0382A vulnerability in the session identification management fun…5.3
• CVE-2018-0383A vulnerability in the detection engine of Cisco FireSIGHT S…
• CVE-2018-0384A vulnerability in the detection engine of Cisco FireSIGHT S…