#VU50942 Memory leak in Cisco Systems, Inc products - CVE-2021-1229
Published: February 25, 2021
Vulnerability identifier: #VU50942
Vulnerability risk: Medium
CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Green
CVE-ID: CVE-2021-1229
CWE-ID: CWE-401
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerable software:
Cisco MDS 9000 Series Multilayer Switches
Nexus 1000V Switch for Microsoft Hyper-V
Nexus 1000V Switch for VMware vSphere
Cisco Nexus 3000 Series Switches
Nexus 5500 Platform Switches
Nexus 6000 Series Switches
Nexus 7000 Series Switches
Cisco Nexus 9000 Series Switches in ACI Mode
Cisco Nexus 9000 Series Switches NX-OS Mode
Nexus 1000 Virtual Edge for VMware vSphere
Cisco MDS 9000 Series Multilayer Switches
Nexus 1000V Switch for Microsoft Hyper-V
Nexus 1000V Switch for VMware vSphere
Cisco Nexus 3000 Series Switches
Nexus 5500 Platform Switches
Nexus 6000 Series Switches
Nexus 7000 Series Switches
Cisco Nexus 9000 Series Switches in ACI Mode
Cisco Nexus 9000 Series Switches NX-OS Mode
Nexus 1000 Virtual Edge for VMware vSphere
Software vendor:
Cisco Systems, Inc
Cisco Systems, Inc
Description
The vulnerability allows a remote attacker to perform denial of service (DoS) attack.
The vulnerability exists due to improper error handling when an IPv6-configured interface receives a specific type of ICMPv6 packet. A remote attacker can force the application to leak memory and cause a denial of service condition on the target system.
Remediation
Install update from vendor's website.