CVE-2019-1967

EPSS 2.57%
Veröffentlicht 30.08.2019 09:15:20
Zuletzt bearbeitet 21.11.2024 04:37:47
Quelle psirt@cisco.com
Teams Watchlist Login
Unerledigt Login

A vulnerability in the Network Time Protocol (NTP) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to excessive use of system resources when the affected device is logging a drop action for received MODE_PRIVATE (Mode 7) NTP packets. An attacker could exploit this vulnerability by flooding the device with a steady stream of Mode 7 NTP packets. A successful exploit could allow the attacker to cause high CPU and memory usage on the affected device, which could cause internal system processes to restart or cause the affected device to unexpectedly reload. Note: The NTP feature is enabled by default.

Betroffene Produkte Warnungen 0 Metriken 4 CWE 1 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Cisco ≫ Nx-os Version6.2

   Cisco ≫ Mds 9000 Version-
   Cisco ≫ Mds 9100 Version-
   Cisco ≫ Mds 9140 Version-
   Cisco ≫ Mds 9200 Version-
   Cisco ≫ Mds 9500 Version-
   Cisco ≫ Mds 9700 Version-

Cisco ≫ Nx-os Version7.3

   Cisco ≫ Mds 9000 Version-
   Cisco ≫ Mds 9100 Version-
   Cisco ≫ Mds 9140 Version-
   Cisco ≫ Mds 9200 Version-
   Cisco ≫ Mds 9500 Version-
   Cisco ≫ Mds 9700 Version-

Cisco ≫ Nx-os Version8.1

   Cisco ≫ Mds 9000 Version-
   Cisco ≫ Mds 9100 Version-
   Cisco ≫ Mds 9140 Version-
   Cisco ≫ Mds 9200 Version-
   Cisco ≫ Mds 9500 Version-
   Cisco ≫ Mds 9700 Version-

Cisco ≫ Nx-os Version8.2

   Cisco ≫ Mds 9000 Version-
   Cisco ≫ Mds 9100 Version-
   Cisco ≫ Mds 9140 Version-
   Cisco ≫ Mds 9200 Version-
   Cisco ≫ Mds 9500 Version-
   Cisco ≫ Mds 9700 Version-

Cisco ≫ Nx-os Version8.3

   Cisco ≫ Mds 9000 Version-
   Cisco ≫ Mds 9100 Version-
   Cisco ≫ Mds 9140 Version-
   Cisco ≫ Mds 9200 Version-
   Cisco ≫ Mds 9500 Version-
   Cisco ≫ Mds 9700 Version-

Cisco ≫ Nx-os Version6.0(2)a8(9.7)

   Cisco ≫ Nexus 3016 Version-
   Cisco ≫ Nexus 3048 Version-
   Cisco ≫ Nexus 3064 Version-
   Cisco ≫ Nexus 3064-t Version-
   Cisco ≫ Nexus 31108pc-v Version-
   Cisco ≫ Nexus 31108tc-v Version-
   Cisco ≫ Nexus 31128pq Version-
   Cisco ≫ Nexus 3132c-z Version-
   Cisco ≫ Nexus 3132q Version-
   Cisco ≫ Nexus 3132q-v Version-
   Cisco ≫ Nexus 3132q-xl Version-
   Cisco ≫ Nexus 3164q Version-
   Cisco ≫ Nexus 3172 Version-
   Cisco ≫ Nexus 3172pq-xl Version-
   Cisco ≫ Nexus 3172tq Version-
   Cisco ≫ Nexus 3172tq-32t Version-
   Cisco ≫ Nexus 3172tq-xl Version-
   Cisco ≫ Nexus 3232c Version-
   Cisco ≫ Nexus 3264c-e Version-
   Cisco ≫ Nexus 3264q Version-
   Cisco ≫ Nexus 3408-s Version-
   Cisco ≫ Nexus 34180yc Version-
   Cisco ≫ Nexus 3432d-s Version-
   Cisco ≫ Nexus 3464c Version-
   Cisco ≫ Nexus 9000v Version-
   Cisco ≫ Nexus 92160yc-x Version-
   Cisco ≫ Nexus 92300yc Version-
   Cisco ≫ Nexus 92304qc Version-
   Cisco ≫ Nexus 92348gc-x Version-
   Cisco ≫ Nexus 9236c Version-
   Cisco ≫ Nexus 9272q Version-
   Cisco ≫ Nexus 93108tc-ex Version-
   Cisco ≫ Nexus 93108tc-fx Version-
   Cisco ≫ Nexus 93120tx Version-
   Cisco ≫ Nexus 93128tx Version-
   Cisco ≫ Nexus 93180lc-ex Version-
   Cisco ≫ Nexus 93180yc-ex Version-
   Cisco ≫ Nexus 93180yc-fx Version-
   Cisco ≫ Nexus 93216tc-fx2 Version-
   Cisco ≫ Nexus 93240yc-fx2 Version-
   Cisco ≫ Nexus 9332c Version-
   Cisco ≫ Nexus 9332pq Version-
   Cisco ≫ Nexus 93360yc-fx2 Version-
   Cisco ≫ Nexus 9336c-fx2 Version-
   Cisco ≫ Nexus 9336pq Aci Spine Version-
   Cisco ≫ Nexus 9348gc-fxp Version-
   Cisco ≫ Nexus 9364c Version-
   Cisco ≫ Nexus 9372px Version-
   Cisco ≫ Nexus 9372px-e Version-
   Cisco ≫ Nexus 9372tx Version-
   Cisco ≫ Nexus 9372tx-e Version-
   Cisco ≫ Nexus 9396px Version-
   Cisco ≫ Nexus 9396tx Version-

Cisco ≫ Nx-os Version6.0(2)u6

Cisco ≫ Nx-os Version7.0(3)i

Cisco ≫ Nx-os Version9.2

Cisco ≫ Nx-os Version9.2(1)

Cisco ≫ Nx-os Version6.0(2)a8

   Cisco ≫ Nexus 3524 Version-
   Cisco ≫ Nexus 3524-x Version-
   Cisco ≫ Nexus 3524-xl Version-
   Cisco ≫ Nexus 3548 Version-
   Cisco ≫ Nexus 3548-x Version-
   Cisco ≫ Nexus 3548-xl Version-

Cisco ≫ Nx-os Version6.0(2)a8(9.7)

Cisco ≫ Nx-os Version7.0(3)i7

Cisco ≫ Nx-os Version9.2

Cisco ≫ Nx-os Version6.0(2)a8(9.7)

   Cisco ≫ Nexus 36180yc-r Version-
   Cisco ≫ Nexus 3636c-r Version-
   Cisco ≫ Nexus 9504 Version-
   Cisco ≫ Nexus 9508 Version-
   Cisco ≫ Nexus 9516 Version-

Cisco ≫ Nx-os Version7.0(3)f

   Cisco ≫ Nexus 36180yc-r Version-
   Cisco ≫ Nexus 3636c-r Version-
   Cisco ≫ Nexus 9504 Version-
   Cisco ≫ Nexus 9508 Version-
   Cisco ≫ Nexus 9516 Version-

Cisco ≫ Nx-os Version9.2

   Cisco ≫ Nexus 36180yc-r Version-
   Cisco ≫ Nexus 3636c-r Version-
   Cisco ≫ Nexus 9504 Version-
   Cisco ≫ Nexus 9508 Version-
   Cisco ≫ Nexus 9516 Version-

Cisco ≫ Nx-os Version9.2(1)

   Cisco ≫ Nexus 36180yc-r Version-
   Cisco ≫ Nexus 3636c-r Version-
   Cisco ≫ Nexus 9504 Version-
   Cisco ≫ Nexus 9508 Version-
   Cisco ≫ Nexus 9516 Version-

Cisco ≫ Nx-os Version7.1(4)

   Cisco ≫ Nexus 5548p Version-
   Cisco ≫ Nexus 5548up Version-
   Cisco ≫ Nexus 5596t Version-
   Cisco ≫ Nexus 5596up Version-
   Cisco ≫ Nexus 56128p Version-
   Cisco ≫ Nexus 5624q Version-
   Cisco ≫ Nexus 5648q Version-
   Cisco ≫ Nexus 5672up Version-
   Cisco ≫ Nexus 5696q Version-
   Cisco ≫ Nexus 6001 Version-
   Cisco ≫ Nexus 6004 Version-

Cisco ≫ Nx-os Version7.1(4)n1(1)

Cisco ≫ Nx-os Version7.1(5)

Cisco ≫ Nx-os Version7.2

Cisco ≫ Nx-os Version7.3

Cisco ≫ Nx-os Version6.2

   Cisco ≫ Nexus 7000 Version-
   Cisco ≫ Nexus 7000 10-slot Version-
   Cisco ≫ Nexus 7000 18-slot Version-
   Cisco ≫ Nexus 7000 4-slot Version-
   Cisco ≫ Nexus 7000 9-slot Version-
   Cisco ≫ Nexus 7700 Version-
   Cisco ≫ Nexus 7700 10-slot Version-
   Cisco ≫ Nexus 7700 18-slot Version-
   Cisco ≫ Nexus 7700 2-slot Version-
   Cisco ≫ Nexus 7700 6-slot Version-

Cisco ≫ Nx-os Version7.2

Cisco ≫ Nx-os Version7.3

Cisco ≫ Nx-os Version7.3(2)d1(1)

Cisco ≫ Nx-os Version8.0

Cisco ≫ Nx-os Version8.1

Cisco ≫ Nx-os Version8.2

Cisco ≫ Nx-os Version8.3

Cisco ≫ Nx-os Version8.3(2)s5

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	2.57%	0.842

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov	7.8	10	6.9	AV:N/AC:L/Au:N/C:N/I:N/A:C
psirt@cisco.com	8.6	3.9	4	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190828-nxos-ntp-dos

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2019-1967

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2019-1967

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2019-1967

EUVD