Denial of Service Vulnerability in Cisco Fabric Services for Cisco FXOS and NX-OS Software

CVE-2018-0311

Summary

A vulnerability exists in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software that can allow an unauthenticated, remote attacker to launch a denial of service (DoS) attack on affected devices. This vulnerability arises from the software’s insufficient validation of Cisco Fabric Services packets during processing. An attacker can exploit this flaw by sending specifically crafted packets, potentially causing a buffer overflow. A successful attack could lead to process crashes, disrupting services and availability on the device. Affected devices include various models in the Firepower, Nexus, and UCS series, highlighting the critical need for updated security measures and patches.

References