8.6

CVE-2019-12658

A vulnerability in the filesystem resource management code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to exhaust filesystem resources on an affected device and cause a denial of service (DoS) condition. The vulnerability is due to ineffective management of the underlying filesystem resources. An attacker could exploit this vulnerability by performing specific actions that result in messages being sent to specific operating system log files. A successful exploit could allow the attacker to exhaust available filesystem space on an affected device. This could cause the device to crash and reload, resulting in a DoS condition for clients whose network traffic is transiting the device. Upon reload of the device, the impacted filesystem space is cleared, and the device will return to normal operation. However, continued exploitation of this vulnerability could cause subsequent forced crashes and reloads, which could lead to an extended DoS condition.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
CiscoIos Xe Version16.6.1
   Cisco1100 Integrated Services R Version-
   Cisco4221 Integrated Services R Version-
   Cisco4321 Integrated Services R Version-
   Cisco4331 Integrated Services R Version-
   Cisco4351 Integrated Services R Version-
   Cisco4431 Integrated Services R Version-
   Cisco4451-x Integrated Services R Version-
   CiscoAsr 1000 Version-
   CiscoAsr 1001-hx R Version-
   CiscoAsr 1001-x R Version-
   CiscoAsr 1002-hx R Version-
   CiscoAsr 1002-x R Version-
   CiscoAsr 900 Version-
   CiscoAsr 900 Version-
   CiscoAsr 920-10sz-pd R Version-
   CiscoAsr 920-12cz-a R Version-
   CiscoAsr 920-12cz-d R Version-
   CiscoAsr 920-12sz-im R Version-
   CiscoAsr 920-24sz-im R Version-
   CiscoAsr 920-24sz-m R Version-
   CiscoAsr 920-24tz-m R Version-
   CiscoAsr 920-4sz-a R Version-
   CiscoAsr 920-4sz-d R Version-
   CiscoCatalyst 3650-12x48uq-e Version-
   CiscoCatalyst 3650-12x48uq-l Version-
   CiscoCatalyst 3650-12x48uq-s Version-
   CiscoCatalyst 3650-12x48ur-e Version-
   CiscoCatalyst 3650-12x48ur-l Version-
   CiscoCatalyst 3650-12x48ur-s Version-
   CiscoCatalyst 3650-12x48uz-e Version-
   CiscoCatalyst 3650-24pd-e Version-
   CiscoCatalyst 3650-24pd-l Version-
   CiscoCatalyst 3650-24pd-s Version-
   CiscoCatalyst 3650-24pdm-e Version-
   CiscoCatalyst 3650-24pdm-l Version-
   CiscoCatalyst 3650-24pdm-s Version-
   CiscoCatalyst 3650-24ps-e Version-
   CiscoCatalyst 3650-24ps-l Version-
   CiscoCatalyst 3650-24ps-s Version-
   CiscoCatalyst 3650-24td-e Version-
   CiscoCatalyst 3650-24td-l Version-
   CiscoCatalyst 3650-24td-s Version-
   CiscoCatalyst 3650-24ts-e Version-
   CiscoCatalyst 3650-24ts-l Version-
   CiscoCatalyst 3650-24ts-s Version-
   CiscoCatalyst 3650-48fd-e Version-
   CiscoCatalyst 3650-48fd-l Version-
   CiscoCatalyst 3650-48fd-s Version-
   CiscoCatalyst 3650-48fq-e Version-
   CiscoCatalyst 3650-48fq-l Version-
   CiscoCatalyst 3650-48fq-s Version-
   CiscoCatalyst 3650-48fqm-e Version-
   CiscoCatalyst 3650-48fqm-l Version-
   CiscoCatalyst 3650-48fqm-s Version-
   CiscoCatalyst 3650-48fs-e Version-
   CiscoCatalyst 3650-48fs-l Version-
   CiscoCatalyst 3650-48fs-s Version-
   CiscoCatalyst 3650-48pd-e Version-
   CiscoCatalyst 3650-48pd-l Version-
   CiscoCatalyst 3650-48pd-s Version-
   CiscoCatalyst 3650-48pq-e Version-
   CiscoCatalyst 3650-48pq-l Version-
   CiscoCatalyst 3650-48pq-s Version-
   CiscoCatalyst 3650-48ps-e Version-
   CiscoCatalyst 3650-48ps-l Version-
   CiscoCatalyst 3650-48ps-s Version-
   CiscoCatalyst 3650-48td-e Version-
   CiscoCatalyst 3650-48td-l Version-
   CiscoCatalyst 3650-48td-s Version-
   CiscoCatalyst 3650-48tq-e Version-
   CiscoCatalyst 3650-48tq-l Version-
   CiscoCatalyst 3650-48tq-s Version-
   CiscoCatalyst 3650-48ts-e Version-
   CiscoCatalyst 3650-48ts-l Version-
   CiscoCatalyst 3650-48ts-s Version-
   CiscoCatalyst 3650-8x24uq-e Version-
   CiscoCatalyst 3650-8x24uq-l Version-
   CiscoCatalyst 3650-8x24uq-s Version-
   CiscoCatalyst 3850-12s-e Version-
   CiscoCatalyst 3850-12s-s Version-
   CiscoCatalyst 3850-12xs-e Version-
   CiscoCatalyst 3850-12xs-s Version-
   CiscoCatalyst 3850-16xs-e Version-
   CiscoCatalyst 3850-16xs-s Version-
   CiscoCatalyst 3850-24p-e Version-
   CiscoCatalyst 3850-24p-l Version-
   CiscoCatalyst 3850-24p-s Version-
   CiscoCatalyst 3850-24s-e Version-
   CiscoCatalyst 3850-24s-s Version-
   CiscoCatalyst 3850-24t-e Version-
   CiscoCatalyst 3850-24t-l Version-
   CiscoCatalyst 3850-24t-s Version-
   CiscoCatalyst 3850-24u-e Version-
   CiscoCatalyst 3850-24u-l Version-
   CiscoCatalyst 3850-24u-s Version-
   CiscoCatalyst 3850-24xs-e Version-
   CiscoCatalyst 3850-24xs-s Version-
   CiscoCatalyst 3850-24xu-e Version-
   CiscoCatalyst 3850-24xu-l Version-
   CiscoCatalyst 3850-24xu-s Version-
   CiscoCatalyst 3850-32xs-e Version-
   CiscoCatalyst 3850-32xs-s Version-
   CiscoCatalyst 3850-48f-e Version-
   CiscoCatalyst 3850-48f-l Version-
   CiscoCatalyst 3850-48f-s Version-
   CiscoCatalyst 3850-48p-e Version-
   CiscoCatalyst 3850-48p-l Version-
   CiscoCatalyst 3850-48p-s Version-
   CiscoCatalyst 3850-48t-e Version-
   CiscoCatalyst 3850-48t-l Version-
   CiscoCatalyst 3850-48t-s Version-
   CiscoCatalyst 3850-48u-e Version-
   CiscoCatalyst 3850-48u-l Version-
   CiscoCatalyst 3850-48u-s Version-
   CiscoCatalyst 3850-48xs-e Version-
   CiscoCatalyst 3850-48xs-f-e Version-
   CiscoCatalyst 3850-48xs-f-s Version-
   CiscoCatalyst 3850-48xs-s Version-
   CiscoCatalyst 9300 Version-
   CiscoCatalyst 9300-24p-a Version-
   CiscoCatalyst 9300-24p-e Version-
   CiscoCatalyst 9300-24t-a Version-
   CiscoCatalyst 9300-24t-e Version-
   CiscoCatalyst 9300-24u-a Version-
   CiscoCatalyst 9300-24u-e Version-
   CiscoCatalyst 9300-48p-a Version-
   CiscoCatalyst 9300-48p-e Version-
   CiscoCatalyst 9300-48t-a Version-
   CiscoCatalyst 9300-48t-e Version-
   CiscoCatalyst 9300-48u-a Version-
   CiscoCatalyst 9300-48u-e Version-
   CiscoCatalyst 9400 Supervisor Engine-1 Version-
   CiscoCatalyst 9407r Version-
   CiscoCatalyst 9410r Version-
   CiscoCatalyst 9500 Version-
   CiscoCatalyst C3850-12x48u-e Version-
   CiscoCatalyst C3850-12x48u-l Version-
   CiscoCatalyst C3850-12x48u-s Version-
   CiscoCatalyst C9500-12q-a Version-
   CiscoCatalyst C9500-12q-e Version-
   CiscoCatalyst C9500-24q-a Version-
   CiscoCatalyst C9500-24q-e Version-
   CiscoCatalyst C9500-40x-a Version-
   CiscoCatalyst C9500-40x-e Version-
   CiscoCloud Services R 1000v Version-
   CiscoNcs 4201 Version-
   CiscoNcs 4202 Version-
   CiscoNcs 4206 Version-
   CiscoNcs 4216 Version-
   CiscoNetwork Convergence System 520 Version-
CiscoIos Xe Version16.8.1
   Cisco1100 Integrated Services R Version-
   Cisco4221 Integrated Services R Version-
   Cisco4321 Integrated Services R Version-
   Cisco4331 Integrated Services R Version-
   Cisco4351 Integrated Services R Version-
   Cisco4431 Integrated Services R Version-
   Cisco4451-x Integrated Services R Version-
   CiscoAsr 1000 Version-
   CiscoAsr 1001-hx R Version-
   CiscoAsr 1001-x R Version-
   CiscoAsr 1002-hx R Version-
   CiscoAsr 1002-x R Version-
   CiscoAsr 900 Version-
   CiscoAsr 900 Version-
   CiscoAsr 920-10sz-pd R Version-
   CiscoAsr 920-12cz-a R Version-
   CiscoAsr 920-12cz-d R Version-
   CiscoAsr 920-12sz-im R Version-
   CiscoAsr 920-24sz-im R Version-
   CiscoAsr 920-24sz-m R Version-
   CiscoAsr 920-24tz-m R Version-
   CiscoAsr 920-4sz-a R Version-
   CiscoAsr 920-4sz-d R Version-
   CiscoCatalyst 3650-12x48uq-e Version-
   CiscoCatalyst 3650-12x48uq-l Version-
   CiscoCatalyst 3650-12x48uq-s Version-
   CiscoCatalyst 3650-12x48ur-e Version-
   CiscoCatalyst 3650-12x48ur-l Version-
   CiscoCatalyst 3650-12x48ur-s Version-
   CiscoCatalyst 3650-12x48uz-e Version-
   CiscoCatalyst 3650-24pd-e Version-
   CiscoCatalyst 3650-24pd-l Version-
   CiscoCatalyst 3650-24pd-s Version-
   CiscoCatalyst 3650-24pdm-e Version-
   CiscoCatalyst 3650-24pdm-l Version-
   CiscoCatalyst 3650-24pdm-s Version-
   CiscoCatalyst 3650-24ps-e Version-
   CiscoCatalyst 3650-24ps-l Version-
   CiscoCatalyst 3650-24ps-s Version-
   CiscoCatalyst 3650-24td-e Version-
   CiscoCatalyst 3650-24td-l Version-
   CiscoCatalyst 3650-24td-s Version-
   CiscoCatalyst 3650-24ts-e Version-
   CiscoCatalyst 3650-24ts-l Version-
   CiscoCatalyst 3650-24ts-s Version-
   CiscoCatalyst 3650-48fd-e Version-
   CiscoCatalyst 3650-48fd-l Version-
   CiscoCatalyst 3650-48fd-s Version-
   CiscoCatalyst 3650-48fq-e Version-
   CiscoCatalyst 3650-48fq-l Version-
   CiscoCatalyst 3650-48fq-s Version-
   CiscoCatalyst 3650-48fqm-e Version-
   CiscoCatalyst 3650-48fqm-l Version-
   CiscoCatalyst 3650-48fqm-s Version-
   CiscoCatalyst 3650-48fs-e Version-
   CiscoCatalyst 3650-48fs-l Version-
   CiscoCatalyst 3650-48fs-s Version-
   CiscoCatalyst 3650-48pd-e Version-
   CiscoCatalyst 3650-48pd-l Version-
   CiscoCatalyst 3650-48pd-s Version-
   CiscoCatalyst 3650-48pq-e Version-
   CiscoCatalyst 3650-48pq-l Version-
   CiscoCatalyst 3650-48pq-s Version-
   CiscoCatalyst 3650-48ps-e Version-
   CiscoCatalyst 3650-48ps-l Version-
   CiscoCatalyst 3650-48ps-s Version-
   CiscoCatalyst 3650-48td-e Version-
   CiscoCatalyst 3650-48td-l Version-
   CiscoCatalyst 3650-48td-s Version-
   CiscoCatalyst 3650-48tq-e Version-
   CiscoCatalyst 3650-48tq-l Version-
   CiscoCatalyst 3650-48tq-s Version-
   CiscoCatalyst 3650-48ts-e Version-
   CiscoCatalyst 3650-48ts-l Version-
   CiscoCatalyst 3650-48ts-s Version-
   CiscoCatalyst 3650-8x24uq-e Version-
   CiscoCatalyst 3650-8x24uq-l Version-
   CiscoCatalyst 3650-8x24uq-s Version-
   CiscoCatalyst 3850-12s-e Version-
   CiscoCatalyst 3850-12s-s Version-
   CiscoCatalyst 3850-12xs-e Version-
   CiscoCatalyst 3850-12xs-s Version-
   CiscoCatalyst 3850-16xs-e Version-
   CiscoCatalyst 3850-16xs-s Version-
   CiscoCatalyst 3850-24p-e Version-
   CiscoCatalyst 3850-24p-l Version-
   CiscoCatalyst 3850-24p-s Version-
   CiscoCatalyst 3850-24s-e Version-
   CiscoCatalyst 3850-24s-s Version-
   CiscoCatalyst 3850-24t-e Version-
   CiscoCatalyst 3850-24t-l Version-
   CiscoCatalyst 3850-24t-s Version-
   CiscoCatalyst 3850-24u-e Version-
   CiscoCatalyst 3850-24u-l Version-
   CiscoCatalyst 3850-24u-s Version-
   CiscoCatalyst 3850-24xs-e Version-
   CiscoCatalyst 3850-24xs-s Version-
   CiscoCatalyst 3850-24xu-e Version-
   CiscoCatalyst 3850-24xu-l Version-
   CiscoCatalyst 3850-24xu-s Version-
   CiscoCatalyst 3850-32xs-e Version-
   CiscoCatalyst 3850-32xs-s Version-
   CiscoCatalyst 3850-48f-e Version-
   CiscoCatalyst 3850-48f-l Version-
   CiscoCatalyst 3850-48f-s Version-
   CiscoCatalyst 3850-48p-e Version-
   CiscoCatalyst 3850-48p-l Version-
   CiscoCatalyst 3850-48p-s Version-
   CiscoCatalyst 3850-48t-e Version-
   CiscoCatalyst 3850-48t-l Version-
   CiscoCatalyst 3850-48t-s Version-
   CiscoCatalyst 3850-48u-e Version-
   CiscoCatalyst 3850-48u-l Version-
   CiscoCatalyst 3850-48u-s Version-
   CiscoCatalyst 3850-48xs-e Version-
   CiscoCatalyst 3850-48xs-f-e Version-
   CiscoCatalyst 3850-48xs-f-s Version-
   CiscoCatalyst 3850-48xs-s Version-
   CiscoCatalyst 9300 Version-
   CiscoCatalyst 9300-24p-a Version-
   CiscoCatalyst 9300-24p-e Version-
   CiscoCatalyst 9300-24t-a Version-
   CiscoCatalyst 9300-24t-e Version-
   CiscoCatalyst 9300-24u-a Version-
   CiscoCatalyst 9300-24u-e Version-
   CiscoCatalyst 9300-48p-a Version-
   CiscoCatalyst 9300-48p-e Version-
   CiscoCatalyst 9300-48t-a Version-
   CiscoCatalyst 9300-48t-e Version-
   CiscoCatalyst 9300-48u-a Version-
   CiscoCatalyst 9300-48u-e Version-
   CiscoCatalyst 9400 Supervisor Engine-1 Version-
   CiscoCatalyst 9407r Version-
   CiscoCatalyst 9410r Version-
   CiscoCatalyst 9500 Version-
   CiscoCatalyst C3850-12x48u-e Version-
   CiscoCatalyst C3850-12x48u-l Version-
   CiscoCatalyst C3850-12x48u-s Version-
   CiscoCatalyst C9500-12q-a Version-
   CiscoCatalyst C9500-12q-e Version-
   CiscoCatalyst C9500-24q-a Version-
   CiscoCatalyst C9500-24q-e Version-
   CiscoCatalyst C9500-40x-a Version-
   CiscoCatalyst C9500-40x-e Version-
   CiscoCloud Services R 1000v Version-
   CiscoNcs 4201 Version-
   CiscoNcs 4202 Version-
   CiscoNcs 4206 Version-
   CiscoNcs 4216 Version-
   CiscoNetwork Convergence System 520 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.03% 0.767
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 7.8 10 6.9
AV:N/AC:L/Au:N/C:N/I:N/A:C
psirt@cisco.com 8.6 3.9 4
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.