CVE-2016-1454 Cisco NX-OS Border Gateway Protocol Denial of Service Vulnerability (cisco-sa-20161005-bgp)

A vulnerability in the Border Gateway Protocol (BGP) implementation of Cisco NX-OS System Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition due to the device unexpectedly reloading. The vulnerability is due to incomplete input validation of the BGP update messages. An attacker could exploit this vulnerability by sending a crafted BGP update message to the targeted device.
The vulnerability may be triggered when the router receives a malformed BGP message from a peer on an existing BGP session.

An exploit could allow the attacker to cause the switch to reload unexpectedly.

Refer to Cisco advisory cisco-sa-20161005-bgp for updates and patch information.

Patch:
Following are links for downloading patches to fix the vulnerabilities:

cisco-sa-20161005-bgp: Cisco NX-OS