csirt@kutim:~/threat-intel/cve/CVE-2021-1387

Katalog CVE

CVSS 8.6 · High EPSS 1,4%

Kerentanan Missing Release of Memory after Effective Lifetime pada cisco unified computing system, cisco nx-os. Skor CVSS 3.1 8.6 (High) menurut NVD.

Deskripsi (NVD)

A vulnerability in the network stack of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability exists because the software improperly releases resources when it processes certain IPv6 packets that are destined to an affected device. An attacker could exploit this vulnerability by sending multiple crafted IPv6 packets to an affected device. A successful exploit could cause the network stack to run out of available buffers, impairing operations of control plane and management plane protocols and resulting in a DoS condition. Manual intervention would be required to restore normal operations on the affected device. For more information about the impact of this vulnerability, see the Details section of this advisory.

Rincian

Terbit di NVD
24 Februari 2021
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
8.6 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-401: Missing Release of Memory after Effective Lifetime
EPSS (30 hari)
1,4% peluang dieksploitasi; lebih tinggi dari 72,1% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
cisco unified computing system Versi 4.0 hingga sebelum 4.0\(4k\)
cisco unified computing system Versi 4.1 hingga sebelum 4.1\(1e\)
cisco nx-os Versi 7.0(0)n1(1)
cisco nx-os Versi 7.0(1)n1(1)
cisco nx-os Versi 7.0(2)n1(1)
cisco nx-os Versi 7.0(3)n1(1)
cisco nx-os Versi 7.0(4)n1(1)
cisco nx-os Versi 7.0(4)n1(1a)
cisco nx-os Versi 7.0(5)n1(1)
cisco nx-os Versi 7.0(5)n1(1a)
cisco nx-os Versi 7.0(6)n1(1)
cisco nx-os Versi 7.0(6)n1(2s)
cisco nx-os Versi 7.0(6)n1(3s)
cisco nx-os Versi 7.0(6)n1(4s)
cisco nx-os Versi 7.0(7)n1(1)
cisco nx-os Versi 7.0(7)n1(1a)
cisco nx-os Versi 7.0(7)n1(1b)
cisco nx-os Versi 7.0(8)n1(1)
cisco nx-os Versi 7.0(8)n1(1a)
cisco nx-os Versi 7.1(0)n1(1)
cisco nx-os Versi 7.1(0)n1(1a)
cisco nx-os Versi 7.1(0)n1(1b)
cisco nx-os Versi 7.1(1)n1(1)
cisco nx-os Versi 7.1(1)n1(1a)
cisco nx-os Versi 7.1(2)n1(1)
cisco nx-os Versi 7.1(2)n1(1a)
cisco nx-os Versi 7.1(3)n1(1)
cisco nx-os Versi 7.1(3)n1(2)
cisco nx-os Versi 7.1(3)n1(2a)
cisco nx-os Versi 7.1(3)n1(3)
cisco nx-os Versi 7.1(3)n1(4)
cisco nx-os Versi 7.1(3)n1(5)
cisco nx-os Versi 7.1(4)n1(1)
cisco nx-os Versi 7.1(4)n1(1a)
cisco nx-os Versi 7.1(4)n1(1c)
cisco nx-os Versi 7.1(4)n1(1d)
cisco nx-os Versi 7.1(5)n1(1)
cisco nx-os Versi 7.1(5)n1(1b)
cisco nx-os Versi 7.2(0)n1(1)
cisco nx-os Versi 7.2(1)n1(1)
cisco nx-os Versi 7.3(0)n1(1)
cisco nx-os Versi 7.3(0)n1(1a)
cisco nx-os Versi 7.3(0)n1(1b)
cisco nx-os Versi 7.3(1)n1(1)
cisco nx-os Versi 7.3(2)n1(1)
cisco nx-os Versi 7.3(2)n1(1b)
cisco nx-os Versi 7.3(2)n1(1c)
cisco nx-os Versi 7.3(3)n1(1)
cisco nx-os Versi 7.3(4)n1(1)
cisco nx-os Versi 7.3(4)n1(1a)
cisco nx-os Versi 7.3(5)n1(1)
cisco nx-os Versi 7.3(6)n1(1)
cisco nx-os Versi 7.3(6)n1(1a)
cisco nx-os Versi 7.3(7)n1(1)
cisco nx-os Versi 7.3(7)n1(1a)
cisco nx-os Versi 7.3(7)n1(1b)
cisco nx-os Versi 6.0(2)a3(1)
cisco nx-os Versi 6.0(2)a3(2)
cisco nx-os Versi 6.0(2)a3(4)
cisco nx-os Versi 6.0(2)a4(1)

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 241 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.