Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2018-0372

EPSS 1.13% · P78
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2018-0372

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
A vulnerability in the DHCPv6 feature of the Cisco Nexus 9000 Series Fabric Switches in Application-Centric Infrastructure (ACI) Mode could allow an unauthenticated, remote attacker to cause the device to run low on system memory, which could result in a Denial of Service (DoS) condition on an affected system. The vulnerability is due to improper memory management when DHCPv6 packets are received on an interface of the targeted device. An attacker could exploit this vulnerability by sending a high number of malicious DHCPv6 packets to be processed by an affected device. A successful exploit could allow the attacker to cause the system to run low on memory, which could cause an eventual reboot of an affected device. The vulnerability only applies to IPv6 protocol packets and not for IPv4 protocol packets. This vulnerability affects Cisco Nexus 9000 Series Fabric Switches in ACI Mode running software version 13.0(1k). The vulnerability can only be exploited when unicast routing is enabled on the Bridge Domain (BD). DHCP and DHCP relay do not have to be configured for the vulnerability to be exploited. Cisco Bug IDs: CSCvg38918.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
未加控制的资源消耗(资源穷尽)
Source: NVD (National Vulnerability Database)
Vulnerability Title
Cisco Nexus 9000 Series Fabric Switches 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco Nexus 9000 Series Fabric Switches是美国思科（Cisco）公司的一款9000系列交换机产品。 Cisco Nexus 9000 Series Fabric Switches（处于ACI模式）13.0(1k)版本中的DHCPv6功能存在拒绝服务漏洞，该漏洞源于程序在目标设备的接口上接收DHCPv6数据包时没有正确的管理内存。远程攻击者可通过发送大量的恶意的DHCPv6数据包利用该漏洞造成拒绝服务。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-Cisco Nexus 9000 Series unknown Cisco Nexus 9000 Series unknown -

II. Public POCs for CVE-2018-0372

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2018-0372

请登录查看更多情报信息。

Same Patch Batch · n/a · 2018-07-18 · 42 CVEs total

CVE-2018-14389joyplus-cms SQL注入漏洞
CVE-2018-0396Cisco Unified Communications Manager IM and Presence Service Software 跨站脚本漏洞
CVE-2018-0398Cisco Finesse 安全漏洞
CVE-2018-0399Cisco Finesse 信息泄露漏洞
CVE-2018-0400Cisco Unified Contact Center Express 跨站脚本漏洞
CVE-2018-0401Cisco Unified Contact Center Express 跨站脚本漏洞
CVE-2018-0402Cisco Unified Contact Center Express 跨站请求伪造漏洞
CVE-2018-0403Cisco Unified Contact Center Express 信息泄露漏洞
CVE-2018-14364GitLab 安全漏洞
CVE-2018-14387WonderCMS 安全漏洞
CVE-2018-14388joyplus-cms 跨站脚本漏洞
CVE-2018-0394Cisco Cloud Services Platform 2100 输入验证漏洞
CVE-2018-12429JEESNS 跨站脚本漏洞
CVE-2018-14082PHP Scripts Mall JOB SITE 跨站脚本漏洞
CVE-2018-7546Kingsoft WPS Office 2016和Jinshan PDF 安全漏洞
CVE-2018-14380Graylog typeahead组件跨站脚本漏洞
CVE-2018-14381Pagekit 安全漏洞
CVE-2018-14382InstantSoft InstantCMS 跨站脚本漏洞
CVE-2018-2968Oracle Construction and Engineering Suite Primavera Unifier组件安全漏洞
CVE-2018-14371Eclipse Mojarra 路径遍历漏洞

Showing top 20 of 42 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same vendor: n/a
Same weakness: CWE-400

V. Comments for CVE-2018-0372

No comments yet

Leave a comment