PT-2019-3264 · Cisco · Cisco Nx-Os+1

Published 2019-08-28 · Updated 2020-10-16 · CVE-2019-1965

Positive Technologies (AI Summary)

CVSS v3.1

7.7

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco NX-OS Software (affected versions not specified)

Description The issue is related to the Virtual Shell (VSH) session management in Cisco NX-OS Software, which can lead to an uncontrolled consumption of resources. An authenticated, remote attacker could exploit this by repeatedly establishing and terminating a remote management connection in an unexpected manner, causing VSH processes to fail to delete upon termination. This can result in a build-up of VSH processes that over time can deplete system memory, leading to unexpected system behaviors and crashes. The attacker must have valid user credentials to log in to the device using the remote management connection.

Recommendations For Cisco NX-OS Software, update to a version that includes the fix for this issue, as software updates have been released by Cisco to address this vulnerability. At the moment, there is no information about specific versions that contain a fix for this vulnerability.

Fix

DoS

Resource Exhaustion

Missing Release of Resource after Effective Lifetime

Weakness Enumeration

CWE-400

CWE-772

Related Identifiers

BDU:2019-03286

CVE-2019-1965

Affected Products

Cisco Nx-Os

Cisco Nexus

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2019-1965 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190828-nxos-memleak-dos · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-1965 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-03286 · Security Note