Skip to content

Cisco Security Advisories for Multiple Products - 20230227004

Overview

Cisco has released security advisories for vulnerabilities affecting multiple Cisco products.

What is the vulnerability?

A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

CVE-2023-20011 - Cisco Application Policy Infrastructure Controller and Cisco Cloud Network Controller Cross-Site Request Forgery Vulnerability.

CVE-2023-20089 - Cisco Nexus 9000 Series Fabric Switches in ACI Mode Link Layer Discovery Protocol Memory Leak Denial of Service Vulnerability.

CVE-2023-20032 - ClamAV HFS+ Partition Scanning Buffer Overflow Vulnerability Affecting Cisco Products.

What is vulnerable?

The vulnerability affects the following products:

Recommendation

For updates addressing lower severity vulnerabilities, see the Cisco Security Advisories page.

  • ClamAV HFS+ Partition Scanning Buffer Overflow Vulnerability Affecting Cisco Products

  • For information about fixed software releases, consult the Cisco bugs identified in the Vulnerable Products section of this advisory. When considering software upgrades, customers are advised to regularly consult the advisories for Cisco products, which are available from the Cisco Security Advisories page, to determine exposure and a complete upgrade solution.

  • Cisco Nexus 9000 Series Fabric Switches in ACI Mode

  • For help determining the best Cisco NX-OS Software release for a Cisco Nexus Switch, see the following Recommended Releases documents. If a security advisory recommends a later release, Cisco recommends following the advisory guidance.To determine the best release for Cisco UCS Software, see the Recommended Releases documents in the release notes for the device.

Additional References