Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
CVE-2015-4324 Details
Description
Buffer overflow in Cisco NX-OS on Nexus 1000V devices for VMware vSphere 7.3(0)ZN(0.81), Nexus 3000 devices 7.3(0)ZN(0.81), Nexus 4000 devices 4.1(2)E1(1c), Nexus 7000 devices 7.2(0)N1(0.1), and Nexus 9000 devices 7.3(0)ZN(0.81) allows remote attackers to cause a denial of service (IGMP process restart) via a malformed IGMPv3 packet that is mishandled during memory allocation, aka Bug IDs CSCuv69713, CSCuv69717, CSCuv69723, CSCuv69732, and CSCuv48908.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No CVSS 3.x data is available for this CVE.
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| http://tools.cisco.com/security/center/viewAlert.x?alertId=40470 | CVE | Vendor Advisory |
| http://www.securityfocus.com/bid/76372 | CVE | Third Party AdvisoryVDB Entry |
| http://www.securitytracker.com/id/1033327 | CVE | Third Party AdvisoryVDB Entry |
| http://tools.cisco.com/security/center/viewAlert.x?alertId=40470 | [email protected] | Vendor Advisory |
| http://www.securityfocus.com/bid/76372 | [email protected] | Third Party AdvisoryVDB Entry |
| http://www.securitytracker.com/id/1033327 | [email protected] | Third Party AdvisoryVDB Entry |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-119 | Improper Restriction of Operations within the Bounds of a Memory Buffer | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| cisco nx-os | 7.3(0)zn(0.81) 4.1(2)e1(1c) 7.2(0)n1(0.1) |
CPE
Remediation
| |
| cisco nexus 3016 | All versions |
CPE
Remediation
| |
| cisco nexus 3048 | All versions |
CPE
Remediation
| |
| cisco nexus 3064 | All versions |
CPE
Remediation
| |
| cisco nexus 31128pq | All versions |
CPE
Remediation
| |
| cisco nexus 3132q | All versions |
CPE
Remediation
| |
| cisco nexus 3164q | All versions |
CPE
Remediation
| |
| cisco nexus 3172 | All versions |
CPE
Remediation
| |
| cisco nexus 3232c | All versions |
CPE
Remediation
| |
| cisco nexus 3264q | All versions |
CPE
Remediation
| |
| cisco nexus 3524 | All versions |
CPE
Remediation
| |
| cisco nexus 3548 | All versions |
CPE
Remediation
| |
| cisco nexus 93120tx | All versions |
CPE
Remediation
| |
| cisco nexus 93128tx | All versions |
CPE
Remediation
| |
| cisco nexus 9332pq | All versions |
CPE
Remediation
| |
| cisco nexus 9336pq aci spine | All versions |
CPE
Remediation
| |
| cisco nexus 9372px | All versions |
CPE
Remediation
| |
| cisco nexus 9372tx | All versions |
CPE
Remediation
| |
| cisco nexus 9396px | All versions |
CPE
Remediation
| |
| cisco nexus 9396tx | All versions |
CPE
Remediation
| |
| cisco nexus 9504 | All versions |
CPE
Remediation
| |
| cisco nexus 9508 | All versions |
CPE
Remediation
| |
| cisco nexus 9516 | All versions |
CPE
Remediation
| |
| cisco nexus 1000v | All versions |
CPE
Remediation
| |
| cisco nexus 4001i | All versions |
CPE
Remediation
| |
| cisco nexus 7000 | All versions |
CPE
Remediation
| |
| cisco nexus 7700 | All versions |
CPE
Remediation
| |
Change History
9 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| May 6, 2026 | Status Change | [email protected] |
| Nov 21, 2024 | CVE Modified | CVE |
| May 14, 2024 | CVE Modified | [email protected] |
| Jan 4, 2017 | Modified Analysis | [email protected] |
| Dec 22, 2016 | CVE Modified | [email protected] |
| Nov 28, 2016 | CVE Modified | [email protected] |
| Aug 20, 2015 | Modified Analysis | [email protected] |
| Aug 20, 2015 | Initial Analysis | [email protected] |