Memory leak in Cisco Systems, Inc products - CVE-2021-1229
Published: February 25, 2021
Vulnerability identifier: #VU50942
CSH Severity: Medium
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2021-1229
CWE-ID: CWE-401
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to perform denial of service (DoS) attack.
The vulnerability exists due to improper error handling when an IPv6-configured interface receives a specific type of ICMPv6 packet. A remote attacker can force the application to leak memory and cause a denial of service condition on the target system.
Affected software
Nexus 1000 Virtual Edge for VMware vSphere
Nexus 1000V Switch for Microsoft Hyper-V
Nexus 1000V Switch for VMware vSphere
Cisco MDS 9000 Series Multilayer Switches
Cisco Nexus 3000 Series Switches
Cisco Nexus 9000 Series Switches in ACI Mode
Nexus 7000 Series Switches
Nexus 5500 Platform Switches
Nexus 6000 Series Switches
Cisco Nexus 9000 Series Switches NX-OS Mode
Nexus 1000V Switch for Microsoft Hyper-V
Nexus 1000V Switch for VMware vSphere
Cisco MDS 9000 Series Multilayer Switches
Cisco Nexus 3000 Series Switches
Cisco Nexus 9000 Series Switches in ACI Mode
Nexus 7000 Series Switches
Nexus 5500 Platform Switches
Nexus 6000 Series Switches
Cisco Nexus 9000 Series Switches NX-OS Mode
How to mitigate CVE-2021-1229
Install update from vendor's website.
Nexus 1000 Virtual Edge for VMware vSphere - update to 5.2.1 SV5.1.3b
Nexus 1000V Switch for Microsoft Hyper-V - update to 5.2.1 SV5.1.3b
Nexus 1000V Switch for VMware vSphere - update to 5.2.1 SV5.1.3b
Cisco MDS 9000 Series Multilayer Switches - addressed in versions 6.2.24.7 S0, 7.0.3 I6.1, 7.3.7 D1.0.12, 7.3.7 D1.1, 7.3.9 N1.0.824, 7.3.9 N1.1, 8.2.6.5 S0, 8.4.3, 8.4.3 S16
Cisco Nexus 3000 Series Switches - update to 7.0.3 I7.9
Cisco Nexus 9000 Series Switches in ACI Mode - update to 7.0.3 I7.9
Nexus 7000 Series Switches - addressed in versions 7.3.5 D1.1, 8.2.5
Nexus 5500 Platform Switches - update to 7.3.8 N1.1
Nexus 6000 Series Switches - update to 7.3.8 N1.1
Cisco Nexus 9000 Series Switches NX-OS Mode - update to 15.1.3e
Nexus 1000V Switch for Microsoft Hyper-V - update to 5.2.1 SV5.1.3b
Nexus 1000V Switch for VMware vSphere - update to 5.2.1 SV5.1.3b
Cisco MDS 9000 Series Multilayer Switches - addressed in versions 6.2.24.7 S0, 7.0.3 I6.1, 7.3.7 D1.0.12, 7.3.7 D1.1, 7.3.9 N1.0.824, 7.3.9 N1.1, 8.2.6.5 S0, 8.4.3, 8.4.3 S16
Cisco Nexus 3000 Series Switches - update to 7.0.3 I7.9
Cisco Nexus 9000 Series Switches in ACI Mode - update to 7.0.3 I7.9
Nexus 7000 Series Switches - addressed in versions 7.3.5 D1.1, 8.2.5
Nexus 5500 Platform Switches - update to 7.3.8 N1.1
Nexus 6000 Series Switches - update to 7.3.8 N1.1
Cisco Nexus 9000 Series Switches NX-OS Mode - update to 15.1.3e