Cisco NX-OS Malformed IP Packet Denial of Service Vulnerability

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cis

A malformed, transit IP packet that would normally be forwarded
by the switch is received and the Time-to-live (TTL) is 1. In
this case, an ICMP error message (time exceeded) needs to be
generated. During generation of this ICMP message, the bug could
be triggered.

Nice behavior.