7.8

CVE-2019-1739

Cisco IOS and IOS XE Software Network-Based Application Recognition Denial of Service Vulnerabilities

A vulnerability in the Network-Based Application Recognition (NBAR) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. This vulnerability is due to a parsing issue on DNS packets. An attacker could exploit this vulnerability by sending crafted DNS packets through routers that are running an affected version and have NBAR enabled. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Ios Version 15.1(2)sg8a
Cisco ≫ Ios Version 15.1(3)svg3d
Cisco ≫ Ios Version 15.1(3)svi1b
Cisco ≫ Ios Version 15.1(3)svk4b
Cisco ≫ Ios Version 15.1(3)svk4c
Cisco ≫ Ios Version 15.1(3)svm3
Cisco ≫ Ios Version 15.1(3)svn2
Cisco ≫ Ios Version 15.1(3)svo1
Cisco ≫ Ios Version 15.1(3)svo2
Cisco ≫ Ios Version 15.1(3)svo3
Cisco ≫ Ios Version 15.1(3)svo4
Cisco ≫ Ios Version 15.1(3)svp1
Cisco ≫ Ios Version 15.1(3)svp2
Cisco ≫ Ios Version 15.1(4)m12c
Cisco ≫ Ios Version 15.2(3)ea1
Cisco ≫ Ios Version 15.2(4a)ea5
Cisco ≫ Ios Version 15.3(3)ja1n
Cisco ≫ Ios Version 15.3(3)jd
Cisco ≫ Ios Version 15.3(3)jd2
Cisco ≫ Ios Version 15.3(3)jd3
Cisco ≫ Ios Version 15.3(3)jd4
Cisco ≫ Ios Version 15.3(3)jd5
Cisco ≫ Ios Version 15.3(3)jd6
Cisco ≫ Ios Version 15.3(3)jd7
Cisco ≫ Ios Version 15.3(3)jd8
Cisco ≫ Ios Version 15.3(3)jd9
Cisco ≫ Ios Version 15.3(3)jd11
Cisco ≫ Ios Version 15.3(3)jd12
Cisco ≫ Ios Version 15.3(3)jd13
Cisco ≫ Ios Version 15.3(3)jd14
Cisco ≫ Ios Version 15.3(3)je
Cisco ≫ Ios Version 15.3(3)jf
Cisco ≫ Ios Version 15.3(3)jf1
Cisco ≫ Ios Version 15.3(3)jf2
Cisco ≫ Ios Version 15.3(3)jf4
Cisco ≫ Ios Version 15.3(3)jf5
Cisco ≫ Ios Version 15.3(3)jf35
Cisco ≫ Ios Version 15.3(3)jg
Cisco ≫ Ios Version 15.3(3)jg1
Cisco ≫ Ios Version 15.3(3)jh
Cisco ≫ Ios Version 15.3(3)ji
Cisco ≫ Ios Version 15.3(3)ji2
Cisco ≫ Ios Version 15.3(3)jnp
Cisco ≫ Ios Version 15.3(3)jnp1
Cisco ≫ Ios Version 15.3(3)jnp3
Cisco ≫ Ios Version 15.3(3)jpb
Cisco ≫ Ios Version 15.3(3)jpb1
Cisco ≫ Ios Version 15.3(3)jpc
Cisco ≫ Ios Version 15.3(3)jpc1
Cisco ≫ Ios Version 15.3(3)jpc2
Cisco ≫ Ios Version 15.3(3)jpc3
Cisco ≫ Ios Version 15.3(3)jpc5
Cisco ≫ Ios Version 15.3(3)jpd
Cisco ≫ Ios Version 15.5(3)m
Cisco ≫ Ios Version 15.5(3)m0a
Cisco ≫ Ios Version 15.5(3)m1
Cisco ≫ Ios Version 15.5(3)m2
Cisco ≫ Ios Version 15.5(3)m2a
Cisco ≫ Ios Version 15.5(3)m3
Cisco ≫ Ios Version 15.5(3)m4
Cisco ≫ Ios Version 15.5(3)m4a
Cisco ≫ Ios Version 15.5(3)m4b
Cisco ≫ Ios Version 15.5(3)m4c
Cisco ≫ Ios Version 15.5(3)m5
Cisco ≫ Ios Version 15.5(3)m5a
Cisco ≫ Ios Version 15.5(3)s
Cisco ≫ Ios Version 15.5(3)s0a
Cisco ≫ Ios Version 15.5(3)s1
Cisco ≫ Ios Version 15.5(3)s1a
Cisco ≫ Ios Version 15.5(3)s2
Cisco ≫ Ios Version 15.5(3)s3
Cisco ≫ Ios Version 15.5(3)s4
Cisco ≫ Ios Version 15.5(3)s5
Cisco ≫ Ios Version 15.5(3)sn
Cisco ≫ Ios Version 15.5(3)sn0a
Cisco ≫ Ios Version 15.6(1)s
Cisco ≫ Ios Version 15.6(1)s1
Cisco ≫ Ios Version 15.6(1)s2
Cisco ≫ Ios Version 15.6(1)s3
Cisco ≫ Ios Version 15.6(1)s4
Cisco ≫ Ios Version 15.6(1)sn
Cisco ≫ Ios Version 15.6(1)sn1
Cisco ≫ Ios Version 15.6(1)sn2
Cisco ≫ Ios Version 15.6(1)sn3
Cisco ≫ Ios Version 15.6(1)t
Cisco ≫ Ios Version 15.6(1)t0a
Cisco ≫ Ios Version 15.6(1)t1
Cisco ≫ Ios Version 15.6(1)t2
Cisco ≫ Ios Version 15.6(2)s
Cisco ≫ Ios Version 15.6(2)s1
Cisco ≫ Ios Version 15.6(2)s2
Cisco ≫ Ios Version 15.6(2)s3
Cisco ≫ Ios Version 15.6(2)s4
Cisco ≫ Ios Version 15.6(2)sn
Cisco ≫ Ios Version 15.6(2)sp3b
Cisco ≫ Ios Version 15.6(2)t
Cisco ≫ Ios Version 15.6(2)t0a
Cisco ≫ Ios Version 15.6(2)t1
Cisco ≫ Ios Version 15.6(2)t2
Cisco ≫ Ios Version 15.6(3)m
Cisco ≫ Ios Version 15.6(3)m0a
Cisco ≫ Ios Version 15.6(3)m1
Cisco ≫ Ios Version 15.6(3)m1a
Cisco ≫ Ios Version 15.6(3)m1b
Cisco ≫ Ios Version 15.6(3)sn
Cisco ≫ Ios Version 15.6(4)sn
Cisco ≫ Ios Version 15.6(5)sn
Cisco ≫ Ios Version 15.6(6)sn
Cisco ≫ Ios Version 15.6(7)sn
Cisco ≫ Ios Xe Version 3.2.0ja
Cisco ≫ Ios Xe Version 3.16.0as
Cisco ≫ Ios Xe Version 3.16.0bs
Cisco ≫ Ios Xe Version 3.16.0cs
Cisco ≫ Ios Xe Version 3.16.0s
Cisco ≫ Ios Xe Version 3.16.1as
Cisco ≫ Ios Xe Version 3.16.1s
Cisco ≫ Ios Xe Version 3.16.2as
Cisco ≫ Ios Xe Version 3.16.2bs
Cisco ≫ Ios Xe Version 3.16.2s
Cisco ≫ Ios Xe Version 3.16.3as
Cisco ≫ Ios Xe Version 3.16.3s
Cisco ≫ Ios Xe Version 3.16.4as
Cisco ≫ Ios Xe Version 3.16.4bs
Cisco ≫ Ios Xe Version 3.16.4cs
Cisco ≫ Ios Xe Version 3.16.4ds
Cisco ≫ Ios Xe Version 3.16.4es
Cisco ≫ Ios Xe Version 3.16.4gs
Cisco ≫ Ios Xe Version 3.16.4s
Cisco ≫ Ios Xe Version 3.16.5as
Cisco ≫ Ios Xe Version 3.16.5s
Cisco ≫ Ios Xe Version 3.17.0s
Cisco ≫ Ios Xe Version 3.17.1as
Cisco ≫ Ios Xe Version 3.17.1s
Cisco ≫ Ios Xe Version 3.17.3s
Cisco ≫ Ios Xe Version 3.17.4s
Cisco ≫ Ios Xe Version 3.18.0as
Cisco ≫ Ios Xe Version 3.18.0s
Cisco ≫ Ios Xe Version 3.18.0sp
Cisco ≫ Ios Xe Version 3.18.1asp
Cisco ≫ Ios Xe Version 3.18.1bsp
Cisco ≫ Ios Xe Version 3.18.1csp
Cisco ≫ Ios Xe Version 3.18.1gsp
Cisco ≫ Ios Xe Version 3.18.1hsp
Cisco ≫ Ios Xe Version 3.18.1isp
Cisco ≫ Ios Xe Version 3.18.1s
Cisco ≫ Ios Xe Version 3.18.1sp
Cisco ≫ Ios Xe Version 3.18.2asp
Cisco ≫ Ios Xe Version 3.18.2s
Cisco ≫ Ios Xe Version 3.18.2sp
Cisco ≫ Ios Xe Version 3.18.3s
Cisco ≫ Ios Xe Version 3.18.4s
Cisco ≫ Ios Xe Version 16.2.1
Cisco ≫ Ios Xe Version 16.2.2
Cisco ≫ Ios Xe Version 16.3.1
Cisco ≫ Ios Xe Version 16.3.1a
Cisco ≫ Ios Xe Version 16.3.2
Cisco ≫ Ios Xe Version 16.3.3
Cisco ≫ Ios Xe Version 16.3.4
Cisco ≫ Ios Xe Version 16.4.1
Cisco ≫ Ios Xe Version 16.4.2
Cisco ≫ Ios Xe Version 16.4.3
Cisco ≫ Ios Xe Version 16.5.1
Cisco ≫ Ios Xe Version 16.5.1a
Cisco ≫ Ios Xe Version 16.5.1b
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.52% 0.828
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST 7.8 10 6.9
AV:N/AC:L/Au:N/C:N/I:N/A:C
Cisco PSIRT 8.6 3.9 4
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.securityfocus.com/bid/107597
Third Party Advisory
Broken Link
VDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190327-nbar
Patch
Vendor Advisory