Rewterz Threat Advisory – CVE-2019-1599 – Cisco Multiple Nexus Switches NX-OS Netstack Denial of Service Vulnerability

Severity

Medium

Analysis Summary

A vulnerability has been reported in multiple Cisco Nexus Switches, which can be exploited by malicious people to cause a DoS (Denial of Service).
An error related to the network stack when allocating and freeing memory buffers can be exploited to exhaust available buffers and subsequently cause a DoS condition via specially crafted TCP streams.

Impact

Denial of Service

Affected Products

This vulnerability affects the following Cisco products if they are running a vulnerable release of Cisco NX-OS Software:
Nexus 1000V Switch for Microsoft Hyper-V
Nexus 1000V Switch for VMware vSphere
Nexus 3000 Series Switches
Nexus 3500 Platform Switches
Nexus 3600 Platform Switches
Nexus 5500 Platform Switches
Nexus 5600 Platform Switches
Nexus 6000 Series Switches
Nexus 7000 Series Switches
Nexus 7700 Series Switches
Nexus 9000 Series Switches in standalone NX-OS mode
Nexus 9500 R-Series Line Cards and Fabric Modules
UCS 6200 Series Fabric Interconnects1
UCS 6300 Series Fabric Interconnects1
UCS 6400 Series Fabric Interconnects1

Remediation

Cisco has released free software updates that address the vulnerability described in this advisory.