Cisco NX-OS 4.1 through 7.3 and 11.0 through 11.2 on Nexus 2000, 3000, 3500, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices allows remote attackers to cause a denial of service (device crash) via malformed IPv4 DHCP packets to the DHCPv4 relay agent, aka Bug IDs CSCuq39250, CSCus21733, CSCus21739, CSCut76171, and CSCux67182.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Nx-os | Cisco | 4.2(1)n1(1) (including) | 4.2(1)n1(1) (including) |
| Nx-os | Cisco | 4.2(1)n2(1) (including) | 4.2(1)n2(1) (including) |
| Nx-os | Cisco | 4.2(1)n2(1a) (including) | 4.2(1)n2(1a) (including) |
| Nx-os | Cisco | 5.0(2)n1(1) (including) | 5.0(2)n1(1) (including) |
| Nx-os | Cisco | 5.0(2)n2(1) (including) | 5.0(2)n2(1) (including) |
| Nx-os | Cisco | 5.0(2)n2(1a) (including) | 5.0(2)n2(1a) (including) |
| Nx-os | Cisco | 5.0(3)n1(1c) (including) | 5.0(3)n1(1c) (including) |
| Nx-os | Cisco | 5.0(3)n2(1) (including) | 5.0(3)n2(1) (including) |
| Nx-os | Cisco | 5.0(3)n2(2) (including) | 5.0(3)n2(2) (including) |
| Nx-os | Cisco | 5.0(3)n2(2a) (including) | 5.0(3)n2(2a) (including) |
| Nx-os | Cisco | 5.0(3)n2(2b) (including) | 5.0(3)n2(2b) (including) |
| Nx-os | Cisco | 5.1(3)n1(1) (including) | 5.1(3)n1(1) (including) |
| Nx-os | Cisco | 5.1(3)n1(1a) (including) | 5.1(3)n1(1a) (including) |
| Nx-os | Cisco | 5.1(3)n2(1) (including) | 5.1(3)n2(1) (including) |
| Nx-os | Cisco | 5.1(3)n2(1a) (including) | 5.1(3)n2(1a) (including) |
| Nx-os | Cisco | 5.1(3)n2(1b) (including) | 5.1(3)n2(1b) (including) |
| Nx-os | Cisco | 5.1(3)n2(1c) (including) | 5.1(3)n2(1c) (including) |
| Nx-os | Cisco | 5.2(1)n1(1) (including) | 5.2(1)n1(1) (including) |
| Nx-os | Cisco | 5.2(1)n1(1a) (including) | 5.2(1)n1(1a) (including) |
| Nx-os | Cisco | 5.2(1)n1(1b) (including) | 5.2(1)n1(1b) (including) |
| Nx-os | Cisco | 5.2(1)n1(2) (including) | 5.2(1)n1(2) (including) |
| Nx-os | Cisco | 5.2(1)n1(2a) (including) | 5.2(1)n1(2a) (including) |
| Nx-os | Cisco | 5.2(1)n1(3) (including) | 5.2(1)n1(3) (including) |
| Nx-os | Cisco | 5.2(1)n1(4) (including) | 5.2(1)n1(4) (including) |
| Nx-os | Cisco | 5.2(1)n1(5) (including) | 5.2(1)n1(5) (including) |
| Nx-os | Cisco | 5.2(1)n1(6) (including) | 5.2(1)n1(6) (including) |
| Nx-os | Cisco | 5.2(1)n1(7) (including) | 5.2(1)n1(7) (including) |
| Nx-os | Cisco | 5.2(1)n1(8) (including) | 5.2(1)n1(8) (including) |
| Nx-os | Cisco | 5.2(1)n1(8a) (including) | 5.2(1)n1(8a) (including) |
| Nx-os | Cisco | 6.0(2)n1(2a) (including) | 6.0(2)n1(2a) (including) |
References
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161005-dhcp2
- http://www.securityfocus.com/bid/93419
- http://www.securitytracker.com/id/1036949
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161005-dhcp2
- http://www.securityfocus.com/bid/93419
- http://www.securitytracker.com/id/1036949