CVE-2019-1738

Summary

A vulnerability in the Network-Based Application Recognition (NBAR) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. This vulnerability is due to a parsing issue on DNS packets. An attacker could exploit these vulnerabilities by sending crafted DNS packets through routers that are running an affected version and have NBAR enabled. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition.

Affected Software

VendorProductVersion RangeStatus
CiscoCisco IOS and IOS-XE Software3.16.0Saffected
CiscoCisco IOS and IOS-XE Software3.16.1Saffected
CiscoCisco IOS and IOS-XE Software3.16.0aSaffected
CiscoCisco IOS and IOS-XE Software3.16.1aSaffected
CiscoCisco IOS and IOS-XE Software3.16.2Saffected
CiscoCisco IOS and IOS-XE Software3.16.2aSaffected
CiscoCisco IOS and IOS-XE Software3.16.0bSaffected
CiscoCisco IOS and IOS-XE Software3.16.0cSaffected
CiscoCisco IOS and IOS-XE Software3.16.3Saffected
CiscoCisco IOS and IOS-XE Software3.16.2bSaffected
CiscoCisco IOS and IOS-XE Software3.16.3aSaffected
CiscoCisco IOS and IOS-XE Software3.16.4Saffected
CiscoCisco IOS and IOS-XE Software3.16.4aSaffected
CiscoCisco IOS and IOS-XE Software3.16.4bSaffected
CiscoCisco IOS and IOS-XE Software3.16.4gSaffected
CiscoCisco IOS and IOS-XE Software3.16.5Saffected
CiscoCisco IOS and IOS-XE Software3.16.4cSaffected
CiscoCisco IOS and IOS-XE Software3.16.4dSaffected
CiscoCisco IOS and IOS-XE Software3.16.4eSaffected
CiscoCisco IOS and IOS-XE Software3.16.5aSaffected
CiscoCisco IOS and IOS-XE Software3.17.0Saffected
CiscoCisco IOS and IOS-XE Software3.17.1Saffected
CiscoCisco IOS and IOS-XE Software3.17.2Saffected
CiscoCisco IOS and IOS-XE Software3.17.1aSaffected
CiscoCisco IOS and IOS-XE Software3.17.3Saffected
CiscoCisco IOS and IOS-XE Software3.17.4Saffected
CiscoCisco IOS and IOS-XE Software3.2.0JAaffected
CiscoCisco IOS and IOS-XE Software16.2.1affected
CiscoCisco IOS and IOS-XE Software16.2.2affected
CiscoCisco IOS and IOS-XE Software16.3.1affected
CiscoCisco IOS and IOS-XE Software16.3.2affected
CiscoCisco IOS and IOS-XE Software16.3.3affected
CiscoCisco IOS and IOS-XE Software16.3.1aaffected
CiscoCisco IOS and IOS-XE Software16.3.4affected
CiscoCisco IOS and IOS-XE Software16.4.1affected
CiscoCisco IOS and IOS-XE Software16.4.2affected
CiscoCisco IOS and IOS-XE Software16.4.3affected
CiscoCisco IOS and IOS-XE Software16.5.1affected
CiscoCisco IOS and IOS-XE Software16.5.1aaffected
CiscoCisco IOS and IOS-XE Software16.5.1baffected
CiscoCisco IOS and IOS-XE Software3.18.0aSaffected
CiscoCisco IOS and IOS-XE Software3.18.0Saffected
CiscoCisco IOS and IOS-XE Software3.18.1Saffected
CiscoCisco IOS and IOS-XE Software3.18.2Saffected
CiscoCisco IOS and IOS-XE Software3.18.3Saffected
CiscoCisco IOS and IOS-XE Software3.18.4Saffected
CiscoCisco IOS and IOS-XE Software3.18.0SPaffected
CiscoCisco IOS and IOS-XE Software3.18.1SPaffected
CiscoCisco IOS and IOS-XE Software3.18.1aSPaffected
CiscoCisco IOS and IOS-XE Software3.18.1gSPaffected
CiscoCisco IOS and IOS-XE Software3.18.1bSPaffected
CiscoCisco IOS and IOS-XE Software3.18.1cSPaffected
CiscoCisco IOS and IOS-XE Software3.18.2SPaffected
CiscoCisco IOS and IOS-XE Software3.18.1hSPaffected
CiscoCisco IOS and IOS-XE Software3.18.2aSPaffected
CiscoCisco IOS and IOS-XE Software3.18.1iSPaffected

Weaknesses

  • CWE-20: CWE-20

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: partial

References