CVE-2011-4023

Description

Memory leak in libcmd in Cisco NX-OS 5.0 on Nexus switches allows remote authenticated users to cause a denial of service (memory consumption) via SNMP requests, aka Bug ID CSCtr65682.

Affected products

• Cisco / nexus_2148t_fex_switch
• Cisco / nexus_2224tp_fex_switch
• Cisco / nexus_2232pp_fex_switch
• Cisco / nexus_2232tm_fex_switch
• Cisco / nexus_2248tp_e_fex_switch
• Cisco / nexus_2248tp_fex_switch
• Cisco / nexus_5010p_switch
• Cisco / nexus_5020p_switch
• Cisco / nexus_5548p
• Cisco / nexus_5548up
• Cisco / nexus_5596up
• Cisco / nx-os5.0(3)n2(1) – 5.0(3)n2(1)
• Cisco / nx-os5.0(3)n2(2) – 5.0(3)n2(2)
• Cisco / nx-os5.0 – 5.0
• Cisco / nx-os5.0(3)n2(2b) – 5.0(3)n2(2b)
• Cisco / nx-os5.0(5) – 5.0(5)
• Cisco / nx-os5.0(3)n2(2a) – 5.0(3)n2(2a)
• Cisco / nx-os5.0(2) – 5.0(2)
• Cisco / nx-os5.0(2)n1(1) – 5.0(2)n1(1)
• Cisco / nx-os5.0(2)n2(1) – 5.0(2)n2(1)
• Cisco / nx-os5.0(2)n2(1a) – 5.0(2)n2(1a)
• Cisco / nx-os5.0(2a) – 5.0(2a)
• Cisco / nx-os5.0(3) – 5.0(3)
• Cisco / nx-os5.0(3)n1(1) – 5.0(3)n1(1)
• Cisco / nx-os5.0(3)n1(1a) – 5.0(3)n1(1a)
• Cisco / nx-os5.0(3)n1(1b) – 5.0(3)n1(1b)
• Cisco / nx-os5.0(3)n1(1c) – 5.0(3)n1(1c)

References

• VENDOR_ADVISORYhttp://www.cisco.com/en/US/docs/switches/datacenter/nexus5000/sw/release/notes/Rel_5_0_3_N2_1/Nexus5000_Release_Notes_5_0_3_N2.html