CVE-2015-4324

Severity: medium (CVSS 6.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-08-19 · updated 2026-06-17
Weakness: CWE-119

Description

Buffer overflow in Cisco NX-OS on Nexus 1000V devices for VMware vSphere 7.3(0)ZN(0.81), Nexus 3000 devices 7.3(0)ZN(0.81), Nexus 4000 devices 4.1(2)E1(1c), Nexus 7000 devices 7.2(0)N1(0.1), and Nexus 9000 devices 7.3(0)ZN(0.81) allows remote attackers to cause a denial of service (IGMP process restart) via a malformed IGMPv3 packet that is mishandled during memory allocation, aka Bug IDs CSCuv69713, CSCuv69717, CSCuv69723, CSCuv69732, and CSCuv48908.

Affected products

Cisco NX-OS: 7.3(0)zn(0.81), 4.1(2)e1(1c), 7.2(0)n1(0.1)

References

http://tools.cisco.com/security/center/viewAlert.x?alertId=40470
http://www.securityfocus.com/bid/76372
http://www.securitytracker.com/id/1033327
http://tools.cisco.com/security/center/viewAlert.x?alertId=40470
http://www.securityfocus.com/bid/76372
http://www.securitytracker.com/id/1033327

Get alerted when CVE-2015-4324 or the next vulnerability affects your stack