| |
Bug Id: | CSCus69452 |
Title: | Assess GHOST vulnerability for DCNM (CVE-2015-0235) |
|
Description: | Symptom:
On January 27, 2015, a buffer overflow vulnerability in the GNU C library (glibc) was publicly announced. This vulnerability is related to the various gethostbyname functions included in glibc and affect applications that call these functions. This vulnerability may allow an attacker to obtain sensitive information from an exploited system or, in some instances, perform remote code execution with the privileges of the application being exploited. This vulnerability is documented in CVE-2015-0235.
A Cisco Security Advisory has been published to document this vulnerability at:
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150128-ghost
This bug has been opened to address the potential impact on this product.
Conditions:
Any of the below of DCNM installer is used
dcnm-va.7.0.1.ova
dcnm-va.7.0.2.ova
dcnm-va.7.1.1.ova
dcnm-va.7.1.1.iso
Workaround:
Not available.
Further Problem Description:
PSIRT Evaluation:
The Cisco PSIRT has assigned this bug the following CVSS version 2 score. The Base and Temporal CVSS scores as of the time of evaluation are: 10/7.8
https://intellishield.cisco.com/security/alertmanager/cvssCalculator.do?dispatch=1&version=2&vector=AV:N/AC:L/Au:N/C:C/I:C/A:C/E:F/RL:OF/RC:C/CDP:ND/TD:ND/CR:ND/IR:ND/AR:ND
The Cisco PSIRT has assigned this score based on information obtained from multiple sources. This includes the CVSS score assigned by the third-party vendor when available. The CVSS score assigned may not reflect the actual impact on the Cisco Product.
Additional information on Cisco's security vulnerability policy can be found at the following URL:
http://www.cisco.com/web/about/security/psirt/security_vulnerability_policy.html
|
|
Status: | Fixed |
|
Severity: | 2 Severe |
Last Modified: | 17-JUL-2015 |
|
Known Affected Releases: | 6.3(2), 7.0(2), 7.1(1) |
|
Known Fixed Releases: | 7.1(1.52)S0 |
|
|
| |
| |
Bug Id: | CSCuv49744 |
Title: | missing N9000 VXLAN EVPN Templates |
|
Description: | Symptom:
missing N9000 VXLAN EVPN Templates for Leaf, Spine and Border Leaf
Conditions:
new install with default values
Workaround:
none
Further Problem Description:
|
|
Status: | Open |
|
Severity: | 2 Severe |
Last Modified: | 29-JUL-2015 |
|
Known Affected Releases: | 7.2(1) |
|
Known Fixed Releases: | |
|
|
| |
| |
Bug Id: | CSCuv49726 |
Title: | BL auto-config simplification |
|
Description: | Symptom:
ER-BL peering requires too many fields to be entered and synchronized, requires simplification
Conditions:
new install with default values
Workaround:
none
Further Problem Description:
|
|
Status: | Open |
|
Severity: | 2 Severe |
Last Modified: | 29-JUL-2015 |
|
Known Affected Releases: | 7.1(1), 7.1(2), 7.2(1) |
|
Known Fixed Releases: | |
|
|
| |
| |
Bug Id: | CSCuv49728 |
Title: | Compute integration (vcenter) does not allow resources to be correlated |
|
Description: | Symptom:
Compute integration (vcenter) does not allow resources to be correlated and searched for normal operation. Present vcenter integration is only used in 1 specific view and not as global available resource
Conditions:
new install with default values
Workaround:
none
Further Problem Description:
|
|
Status: | Open |
|
Severity: | 2 Severe |
Last Modified: | 29-JUL-2015 |
|
Known Affected Releases: | 7.0(1), 7.0(2), 7.1(1), 7.1(2), 7.2(1) |
|
Known Fixed Releases: | |
|
|
| |
| |
Bug Id: | CSCuv49742 |
Title: | missing N7000 VXLAN EVPN Templates |
|
Description: | Symptom:
missing N7000 VXLAN EVPN Templates for Spine and Border Leaf (Border Spine). Does also require to have LISP integration
Conditions:
new install with default values
Workaround:
none
Further Problem Description:
|
|
Status: | Open |
|
Severity: | 2 Severe |
Last Modified: | 29-JUL-2015 |
|
Known Affected Releases: | 7.2(1) |
|
Known Fixed Releases: | |
|
|
| |
| |
Bug Id: | CSCuv49739 |
Title: | missing N7000 VXLAN F&L Templates |
|
Description: | Symptom:
missing N7000 VXLAN F&L Templates for Leaf, Spine and Border Leaf
Conditions:
new install with default values
Workaround:
none
Further Problem Description:
|
|
Status: | Open |
|
Severity: | 2 Severe |
Last Modified: | 29-JUL-2015 |
|
Known Affected Releases: | 7.2(1) |
|
Known Fixed Releases: | |
|
|
| |
| |
Bug Id: | CSCuv49645 |
Title: | Extend Partition shows green checkmark, even if BL auto-config fails |
|
Description: | Symptom:
Extending Partition in DCNM Auto-Config does show green check-mark, even if configuration on Switch fails. No rollback is perform in DCNM for erroneous situation
Conditions:
extending a partition
Workaround:
Disable Extension
correct failure in BL auto-config
Enable Extension
Further Problem Description:
|
|
Status: | Open |
|
Severity: | 2 Severe |
Last Modified: | 29-JUL-2015 |
|
Known Affected Releases: | 7.1(1), 7.1(2), 7.2(1) |
|
Known Fixed Releases: | |
|
|
| |
| |
Bug Id: | CSCut77407 |
Title: | APRIL 2015 NTPd Vulnerabilities |
|
Description: | Symptoms:
This product has been investigated to determine the applicability of the vulnerabilities identified by the following Common Vulnerability and Exposures (CVE) IDs:
CVE-2015-1798 and CVE-2015-1799
Cisco has analyzed this vulnerability and concluded that the previously listed products are not impacted.
Conditions:
Not applicable
Workaround:
Not applicable
Further Problem Description:
Additional details about those vulnerabilities can be found at http://cve.mitre.org/cve/cve.html
PSIRT Evaluation:
The Cisco PSIRT has evaluated those issues and they do not meet the criteria for PSIRT ownership or involvement. Those issues will be addressed via normal resolution channels.
If you believe that there is new information that would cause a change in the severity of those issues, please contact psirt@cisco.com for another evaluation.
Additional information on Cisco's security vulnerability policy can be found at the following URL:
http://www.cisco.com/web/about/security/psirt/security_vulnerability_policy.html
|
|
Status: | Open |
|
Severity: | 2 Severe |
Last Modified: | 29-JUL-2015 |
|
Known Affected Releases: | 7.1(1) |
|
Known Fixed Releases: | |
|
|
| |
| |
Bug Id: | CSCuv49725 |
Title: | Fabric view does not show N9k |
|
Description: | Symptom:
Fabric view does not show N9k.
Appropriate selection of Leaf, Spine, Border Leaf does need to be present (override)
Appropriate POD selection does need to be present (override)
Conditions:
new install with default values
Workaround:
none
Further Problem Description:
|
|
Status: | Open |
|
Severity: | 2 Severe |
Last Modified: | 29-JUL-2015 |
|
Known Affected Releases: | 7.1(1), 7.1(2), 7.2(1) |
|
Known Fixed Releases: | |
|
|
| |
2013 Cisco and/or its affiliates. All rights reserved. 
没有评论:
发表评论