Lucene search

[email protected]CVE-2019-1740

HistoryMar 28, 2019 - 12:29 a.m.

CVE-2019-1740

2019-03-2800:29:00

CWE-20

[email protected]

web.nvd.nist.gov

cisco

ios

ios xe

vulnerability

nbar

dns

denial of service

dos

reload

cve-2019-1740

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

8.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

8.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.4%

JSON

A vulnerability in the Network-Based Application Recognition (NBAR) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. This vulnerability are due to a parsing issue on DNS packets. An attacker could exploit this vulnerability by sending crafted DNS packets through routers that are running an affected version and have NBAR enabled. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition.

Affected configurations

NVD

Node

ciscoios_xeMatch3.2.0ja

ciscoios_xeMatch3.16.0as

ciscoios_xeMatch3.16.0bs

ciscoios_xeMatch3.16.0cs

ciscoios_xeMatch3.16.0s

ciscoios_xeMatch3.16.1as

ciscoios_xeMatch3.16.1s

ciscoios_xeMatch3.16.2as

ciscoios_xeMatch3.16.2bs

ciscoios_xeMatch3.16.2s

ciscoios_xeMatch3.16.3as

ciscoios_xeMatch3.16.3s

ciscoios_xeMatch3.16.4as

ciscoios_xeMatch3.16.4bs

ciscoios_xeMatch3.16.4cs

ciscoios_xeMatch3.16.4ds

ciscoios_xeMatch3.16.4es

ciscoios_xeMatch3.16.4gs

ciscoios_xeMatch3.16.4s

ciscoios_xeMatch3.16.5as

ciscoios_xeMatch3.16.5s

ciscoios_xeMatch3.17.0s

ciscoios_xeMatch3.17.1as

ciscoios_xeMatch3.17.1s

ciscoios_xeMatch3.17.2s

ciscoios_xeMatch3.17.3s

ciscoios_xeMatch3.17.4s

ciscoios_xeMatch3.18.0as

ciscoios_xeMatch3.18.0s

ciscoios_xeMatch3.18.0sp

ciscoios_xeMatch3.18.1asp

ciscoios_xeMatch3.18.1bsp

ciscoios_xeMatch3.18.1csp

ciscoios_xeMatch3.18.1gsp

ciscoios_xeMatch3.18.1hsp

ciscoios_xeMatch3.18.1isp

ciscoios_xeMatch3.18.1s

ciscoios_xeMatch3.18.1sp

ciscoios_xeMatch3.18.2asp

ciscoios_xeMatch3.18.2s

ciscoios_xeMatch3.18.2sp

ciscoios_xeMatch3.18.3s

ciscoios_xeMatch3.18.4s

ciscoios_xeMatch16.2.1

ciscoios_xeMatch16.2.2

ciscoios_xeMatch16.3.1

ciscoios_xeMatch16.3.1a

ciscoios_xeMatch16.3.2

ciscoios_xeMatch16.3.3

ciscoios_xeMatch16.3.4

ciscoios_xeMatch16.4.1

ciscoios_xeMatch16.4.2

ciscoios_xeMatch16.4.3

ciscoios_xeMatch16.5.1

ciscoios_xeMatch16.5.1a

ciscoios_xeMatch16.5.1b

ciscoios_xeMatch16.9.3s

ciscoios_xeMatch16.9.4c

Node

ciscoiosMatch15.3\(3\)jd

ciscoiosMatch15.3\(3\)jd2

ciscoiosMatch15.3\(3\)jd3

ciscoiosMatch15.3\(3\)jd4

ciscoiosMatch15.3\(3\)jd5

ciscoiosMatch15.3\(3\)jd6

ciscoiosMatch15.3\(3\)jd7

ciscoiosMatch15.3\(3\)jd8

ciscoiosMatch15.3\(3\)jd9

ciscoiosMatch15.3\(3\)jd11

ciscoiosMatch15.3\(3\)jd12

ciscoiosMatch15.3\(3\)jd13

ciscoiosMatch15.3\(3\)jd14

ciscoiosMatch15.3\(3\)je

ciscoiosMatch15.3\(3\)jf

ciscoiosMatch15.3\(3\)jf1

ciscoiosMatch15.3\(3\)jf2

ciscoiosMatch15.3\(3\)jf4

ciscoiosMatch15.3\(3\)jf5

ciscoiosMatch15.3\(3\)jg

ciscoiosMatch15.3\(3\)jg1

ciscoiosMatch15.3\(3\)jh

ciscoiosMatch15.3\(3\)jk6

ciscoiosMatch15.3\(3\)jnp

ciscoiosMatch15.3\(3\)jnp1

ciscoiosMatch15.3\(3\)jnp3

ciscoiosMatch15.3\(3\)jpb

ciscoiosMatch15.3\(3\)jpb1

ciscoiosMatch15.3\(3\)jpc

ciscoiosMatch15.3\(3\)jpc1

ciscoiosMatch15.3\(3\)jpc2

ciscoiosMatch15.3\(3\)jpc3

ciscoiosMatch15.3\(3\)jpc5

ciscoiosMatch15.3\(3\)jpd

ciscoiosMatch15.5\(3\)m

ciscoiosMatch15.5\(3\)m0a

ciscoiosMatch15.5\(3\)m1

ciscoiosMatch15.5\(3\)m2

ciscoiosMatch15.5\(3\)m2a

ciscoiosMatch15.5\(3\)m3

ciscoiosMatch15.5\(3\)m4

ciscoiosMatch15.5\(3\)m4a

ciscoiosMatch15.5\(3\)m4b

ciscoiosMatch15.5\(3\)m4c

ciscoiosMatch15.5\(3\)m5

ciscoiosMatch15.5\(3\)s

ciscoiosMatch15.5\(3\)s0a

ciscoiosMatch15.5\(3\)s1

ciscoiosMatch15.5\(3\)s1a

ciscoiosMatch15.5\(3\)s2

ciscoiosMatch15.5\(3\)s3

ciscoiosMatch15.5\(3\)s4

ciscoiosMatch15.5\(3\)s5

ciscoiosMatch15.5\(3\)sn

ciscoiosMatch15.5\(3\)sn0a

ciscoiosMatch15.6\(1\)s

ciscoiosMatch15.6\(1\)s1

ciscoiosMatch15.6\(1\)s2

ciscoiosMatch15.6\(1\)s3

ciscoiosMatch15.6\(1\)s4

ciscoiosMatch15.6\(1\)sn

ciscoiosMatch15.6\(1\)sn1

ciscoiosMatch15.6\(1\)sn2

ciscoiosMatch15.6\(1\)sn3

ciscoiosMatch15.6\(1\)t

ciscoiosMatch15.6\(1\)t0a

ciscoiosMatch15.6\(1\)t1

ciscoiosMatch15.6\(1\)t2

ciscoiosMatch15.6\(2\)s

ciscoiosMatch15.6\(2\)s1

ciscoiosMatch15.6\(2\)s2

ciscoiosMatch15.6\(2\)s3

ciscoiosMatch15.6\(2\)s4

ciscoiosMatch15.6\(2\)sn

ciscoiosMatch15.6\(2\)t

ciscoiosMatch15.6\(2\)t0a

ciscoiosMatch15.6\(2\)t1

ciscoiosMatch15.6\(2\)t2

ciscoiosMatch15.6\(3\)m

ciscoiosMatch15.6\(3\)m0a

ciscoiosMatch15.6\(3\)m1

ciscoiosMatch15.6\(3\)m1a

ciscoiosMatch15.6\(3\)m1b

ciscoiosMatch15.6\(3\)sn

ciscoiosMatch15.6\(4\)sn

ciscoiosMatch15.6\(5\)sn

ciscoiosMatch15.6\(6\)sn

ciscoiosMatch15.6\(7\)sn

ciscoiosMatch15.6\(7\)sn1

ciscoiosMatch15.6\(7\)sn2

ciscoiosMatch15.6\(7\)sn3

CPENameOperatorVersion
cisco:ios_xecisco ios xeeq3.2.0ja
cisco:ios_xecisco ios xeeq3.16.0as
cisco:ios_xecisco ios xeeq3.16.0bs
cisco:ios_xecisco ios xeeq3.16.0cs
cisco:ios_xecisco ios xeeq3.16.0s
cisco:ios_xecisco ios xeeq3.16.1as
cisco:ios_xecisco ios xeeq3.16.1s
cisco:ios_xecisco ios xeeq3.16.2as
cisco:ios_xecisco ios xeeq3.16.2bs
cisco:ios_xecisco ios xeeq3.16.2s

CPE	Name	Operator	Version
cisco:ios_xe	cisco ios xe	eq	3.2.0ja
cisco:ios_xe	cisco ios xe	eq	3.16.0as
cisco:ios_xe	cisco ios xe	eq	3.16.0bs
cisco:ios_xe	cisco ios xe	eq	3.16.0cs
cisco:ios_xe	cisco ios xe	eq	3.16.0s
cisco:ios_xe	cisco ios xe	eq	3.16.1as
cisco:ios_xe	cisco ios xe	eq	3.16.1s
cisco:ios_xe	cisco ios xe	eq	3.16.2as
cisco:ios_xe	cisco ios xe	eq	3.16.2bs
cisco:ios_xe	cisco ios xe	eq	3.16.2s

Rows per page:

1-10 of 581

CNA Affected

[
  {
    "product": "Cisco IOS and Cisco IOS-XE Software",
    "vendor": "Cisco",
    "versions": [
      {
        "status": "affected",
        "version": "3.16.0S"
      },
      {
        "status": "affected",
        "version": "3.16.1S"
      },
      {
        "status": "affected",
        "version": "3.16.0aS"
      },
      {
        "status": "affected",
        "version": "3.16.1aS"
      },
      {
        "status": "affected",
        "version": "3.16.2S"
      },
      {
        "status": "affected",
        "version": "3.16.2aS"
      },
      {
        "status": "affected",
        "version": "3.16.0bS"
      },
      {
        "status": "affected",
        "version": "3.16.0cS"
      },
      {
        "status": "affected",
        "version": "3.16.3S"
      },
      {
        "status": "affected",
        "version": "3.16.2bS"
      },
      {
        "status": "affected",
        "version": "3.16.3aS"
      },
      {
        "status": "affected",
        "version": "3.16.4S"
      },
      {
        "status": "affected",
        "version": "3.16.4aS"
      },
      {
        "status": "affected",
        "version": "3.16.4bS"
      },
      {
        "status": "affected",
        "version": "3.16.4gS"
      },
      {
        "status": "affected",
        "version": "3.16.5S"
      },
      {
        "status": "affected",
        "version": "3.16.4cS"
      },
      {
        "status": "affected",
        "version": "3.16.4dS"
      },
      {
        "status": "affected",
        "version": "3.16.4eS"
      },
      {
        "status": "affected",
        "version": "3.16.5aS"
      },
      {
        "status": "affected",
        "version": "3.17.0S"
      },
      {
        "status": "affected",
        "version": "3.17.1S"
      },
      {
        "status": "affected",
        "version": "3.17.2S"
      },
      {
        "status": "affected",
        "version": "3.17.1aS"
      },
      {
        "status": "affected",
        "version": "3.17.3S"
      },
      {
        "status": "affected",
        "version": "3.17.4S"
      },
      {
        "status": "affected",
        "version": "3.2.0JA"
      },
      {
        "status": "affected",
        "version": "16.2.1"
      },
      {
        "status": "affected",
        "version": "16.2.2"
      },
      {
        "status": "affected",
        "version": "16.3.1"
      },
      {
        "status": "affected",
        "version": "16.3.2"
      },
      {
        "status": "affected",
        "version": "16.3.3"
      },
      {
        "status": "affected",
        "version": "16.3.1a"
      },
      {
        "status": "affected",
        "version": "16.3.4"
      },
      {
        "status": "affected",
        "version": "16.4.1"
      },
      {
        "status": "affected",
        "version": "16.4.2"
      },
      {
        "status": "affected",
        "version": "16.4.3"
      },
      {
        "status": "affected",
        "version": "16.5.1"
      },
      {
        "status": "affected",
        "version": "16.5.1a"
      },
      {
        "status": "affected",
        "version": "16.5.1b"
      },
      {
        "status": "affected",
        "version": "3.18.0aS"
      },
      {
        "status": "affected",
        "version": "3.18.0S"
      },
      {
        "status": "affected",
        "version": "3.18.1S"
      },
      {
        "status": "affected",
        "version": "3.18.2S"
      },
      {
        "status": "affected",
        "version": "3.18.3S"
      },
      {
        "status": "affected",
        "version": "3.18.4S"
      },
      {
        "status": "affected",
        "version": "3.18.0SP"
      },
      {
        "status": "affected",
        "version": "3.18.1SP"
      },
      {
        "status": "affected",
        "version": "3.18.1aSP"
      },
      {
        "status": "affected",
        "version": "3.18.1gSP"
      },
      {
        "status": "affected",
        "version": "3.18.1bSP"
      },
      {
        "status": "affected",
        "version": "3.18.1cSP"
      },
      {
        "status": "affected",
        "version": "3.18.2SP"
      },
      {
        "status": "affected",
        "version": "3.18.1hSP"
      },
      {
        "status": "affected",
        "version": "3.18.2aSP"
      },
      {
        "status": "affected",
        "version": "3.18.1iSP"
      }
    ]
  }
]

References

www.securityfocus.com/bid/107597

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190327-nbar

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

8.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

8.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.4%

JSON

Related for CVE-2019-1740

nvd1 prion1 cvelist1 cisco1 nessus2