CVE-2019-1599

CWE-399CWE-770 — Allocation without Limits5 documents5 sources
Severity
8.6HIGH
EPSS
5.9%
top 9.44%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
11
Cisco Nexus 1000v Switch FOR Microsoft Hyper-vCisco Nexus 1000v Switch FOR Vmware VsphereCisco Nexus 3000 Series Switches+8 more
Timeline
PublishedMar 7
Latest updateMay 13

Description

A vulnerability in the network stack of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on the affected device. The vulnerability is due to an issue with allocating and freeing memory buffers in the network stack. An attacker could exploit this vulnerability by sending crafted TCP streams to an affected device in a sustained way. A successful exploit could cause the network stack of an affected device to run out of available buffe…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:HExploitability: 3.9 | Impact: 4.0

Affected Packages11 packages

▶CVEListV5cisco/nexus_7000_and_7700_series_switchesunspecified — 6.2(22)+3
▶CVEListV5cisco/nexus_3000_series_switchesunspecified — 7.0(3)I7(6)+1
▶CVEListV5cisco/nexus_9500_r-series_line_cards_and_fabric_modulesunspecified — 7.0(3)F3(5)+1
▶CVEListV5cisco/nexus_9000_series_switches_in_standalone_nx-os_modeunspecified — 7.0(3)I7(6)+1
▶CVEListV5cisco/nexus_3500_platform_switchesunspecified — 6.0(2)A8(11)+2

Patches

Patch: tools.cisco.com ↗Patch: tools.cisco.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-pp5p-9g8q-357j: A vulnerability in the network stack of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condit↗2022-05-13
▶
CVEList
Cisco NX-OS Software Netstack Denial of Service Vulnerability↗2019-03-07
▶

📋Vendor Advisories

1
Cisco
Cisco NX-OS Software Netstack Denial of Service Vulnerability↗2019-03-06
▶

💬Community

1
Bugzilla
CVE-2019-13135 ImageMagick: a "use of uninitialized value" vulnerability in the function ReadCUTImage leading to a crash and DoS↗2019-07-02
▶