PT-2019-1714 · Cisco · Cisco Ios+1

Published 2019-03-27 · Updated 2024-03-04 · CVE-2019-1739

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco IOS Software (affected versions not specified) Cisco IOS XE Software (affected versions not specified)

Description A parsing issue on DNS packets in the Network-Based Application Recognition (NBAR) feature could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. This can be achieved by sending crafted DNS packets through routers that are running an affected version and have NBAR enabled.

Recommendations For Cisco IOS Software, update to a version that addresses this vulnerability. For Cisco IOS XE Software, update to a version that addresses this vulnerability. As a temporary workaround, consider disabling the NBAR feature until a patch is available. Restrict access to the DNS packets to minimize the risk of exploitation.

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2019-01332

BDU:2019-01333

CVE-2019-1739

Affected Products

Cisco Ios

Cisco Ios Xe

References · 7

• https://osv.dev/vulnerability/CVE-2019-1739 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-01333 · Security Note
• https://bdu.fstec.ru/vul/2019-01332 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190327-nbar · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-1739 · Security Note
• http://securityfocus.com/bid/107597 · Note
• https://t.me/cvenotify/46782 · Telegram Post