CVE-2019-1739

Summary

A vulnerability in the Network-Based Application Recognition (NBAR) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. This vulnerability is due to a parsing issue on DNS packets. An attacker could exploit this vulnerability by sending crafted DNS packets through routers that are running an affected version and have NBAR enabled. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition.

Affected Software

VendorProductVersion RangeStatus
CiscoCisco IOS and Cisco IOS-XE Software3.16.0Saffected
CiscoCisco IOS and Cisco IOS-XE Software3.16.1Saffected
CiscoCisco IOS and Cisco IOS-XE Software3.16.0aSaffected
CiscoCisco IOS and Cisco IOS-XE Software3.16.1aSaffected
CiscoCisco IOS and Cisco IOS-XE Software3.16.2Saffected
CiscoCisco IOS and Cisco IOS-XE Software3.16.2aSaffected
CiscoCisco IOS and Cisco IOS-XE Software3.16.0bSaffected
CiscoCisco IOS and Cisco IOS-XE Software3.16.0cSaffected
CiscoCisco IOS and Cisco IOS-XE Software3.16.3Saffected
CiscoCisco IOS and Cisco IOS-XE Software3.16.2bSaffected
CiscoCisco IOS and Cisco IOS-XE Software3.16.3aSaffected
CiscoCisco IOS and Cisco IOS-XE Software3.16.4Saffected
CiscoCisco IOS and Cisco IOS-XE Software3.16.4aSaffected
CiscoCisco IOS and Cisco IOS-XE Software3.16.4bSaffected
CiscoCisco IOS and Cisco IOS-XE Software3.16.4gSaffected
CiscoCisco IOS and Cisco IOS-XE Software3.16.5Saffected
CiscoCisco IOS and Cisco IOS-XE Software3.16.4cSaffected
CiscoCisco IOS and Cisco IOS-XE Software3.16.4dSaffected
CiscoCisco IOS and Cisco IOS-XE Software3.16.4eSaffected
CiscoCisco IOS and Cisco IOS-XE Software3.16.5aSaffected
CiscoCisco IOS and Cisco IOS-XE Software3.17.0Saffected
CiscoCisco IOS and Cisco IOS-XE Software3.17.1Saffected
CiscoCisco IOS and Cisco IOS-XE Software3.17.2Saffected
CiscoCisco IOS and Cisco IOS-XE Software3.17.1aSaffected
CiscoCisco IOS and Cisco IOS-XE Software3.17.3Saffected
CiscoCisco IOS and Cisco IOS-XE Software3.17.4Saffected
CiscoCisco IOS and Cisco IOS-XE Software3.2.0JAaffected
CiscoCisco IOS and Cisco IOS-XE Software16.2.1affected
CiscoCisco IOS and Cisco IOS-XE Software16.2.2affected
CiscoCisco IOS and Cisco IOS-XE Software16.3.1affected
CiscoCisco IOS and Cisco IOS-XE Software16.3.2affected
CiscoCisco IOS and Cisco IOS-XE Software16.3.3affected
CiscoCisco IOS and Cisco IOS-XE Software16.3.1aaffected
CiscoCisco IOS and Cisco IOS-XE Software16.3.4affected
CiscoCisco IOS and Cisco IOS-XE Software16.4.1affected
CiscoCisco IOS and Cisco IOS-XE Software16.4.2affected
CiscoCisco IOS and Cisco IOS-XE Software16.4.3affected
CiscoCisco IOS and Cisco IOS-XE Software16.5.1affected
CiscoCisco IOS and Cisco IOS-XE Software16.5.1aaffected
CiscoCisco IOS and Cisco IOS-XE Software16.5.1baffected
CiscoCisco IOS and Cisco IOS-XE Software3.18.0aSaffected
CiscoCisco IOS and Cisco IOS-XE Software3.18.0Saffected
CiscoCisco IOS and Cisco IOS-XE Software3.18.1Saffected
CiscoCisco IOS and Cisco IOS-XE Software3.18.2Saffected
CiscoCisco IOS and Cisco IOS-XE Software3.18.3Saffected
CiscoCisco IOS and Cisco IOS-XE Software3.18.4Saffected
CiscoCisco IOS and Cisco IOS-XE Software3.18.0SPaffected
CiscoCisco IOS and Cisco IOS-XE Software3.18.1SPaffected
CiscoCisco IOS and Cisco IOS-XE Software3.18.1aSPaffected
CiscoCisco IOS and Cisco IOS-XE Software3.18.1gSPaffected
CiscoCisco IOS and Cisco IOS-XE Software3.18.1bSPaffected
CiscoCisco IOS and Cisco IOS-XE Software3.18.1cSPaffected
CiscoCisco IOS and Cisco IOS-XE Software3.18.2SPaffected
CiscoCisco IOS and Cisco IOS-XE Software3.18.1hSPaffected
CiscoCisco IOS and Cisco IOS-XE Software3.18.2aSPaffected
CiscoCisco IOS and Cisco IOS-XE Software3.18.1iSPaffected

Weaknesses

  • CWE-20: CWE-20

ADP Enrichment

CVE Program Container

Additional References

References