CVE-2019-12658: Cisco IOS XE Software Filesystem Exhaustion Denial of Service Vulnerability
First published: Wed Sep 25 2019(Updated: )
A vulnerability in the filesystem resource management code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to exhaust filesystem resources on an affected device and cause a denial of service (DoS) condition. The vulnerability is due to ineffective management of the underlying filesystem resources. An attacker could exploit this vulnerability by performing specific actions that result in messages being sent to specific operating system log files. A successful exploit could allow the attacker to exhaust available filesystem space on an affected device. This could cause the device to crash and reload, resulting in a DoS condition for clients whose network traffic is transiting the device. Upon reload of the device, the impacted filesystem space is cleared, and the device will return to normal operation. However, continued exploitation of this vulnerability could cause subsequent forced crashes and reloads, which could lead to an extended DoS condition.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco IOS XE | =16.6.1 | |
| Cisco IOS XE | =16.8.1 | |
| Cisco 4221 Integrated Services R | ||
| Cisco 4321 Integrated Services R | ||
| Cisco 4331 Integrated Services R | ||
| Cisco 4351 Integrated Services R | ||
| Cisco 4431 Integrated Services R | ||
| Cisco 4451-x Integrated Services R | ||
| Cisco ASR 1000 | ||
| Cisco Asr 1001-hx R | ||
| Cisco Asr 1001-x R | ||
| Cisco Asr 1002-hx R | ||
| Cisco Asr 1002-x R | ||
| Cisco Asr 900 | ||
| Cisco Asr 900 | ||
| Cisco Asr 920-10sz-pd R | ||
| Cisco Asr 920-12cz-a R | ||
| Cisco Asr 920-12cz-d R | ||
| Cisco Asr 920-12sz-im R | ||
| Cisco Asr 920-24sz-im R | ||
| Cisco Asr 920-24sz-m R | ||
| Cisco Asr 920-24tz-m R | ||
| Cisco Asr 920-4sz-a R | ||
| Cisco Asr 920-4sz-d R | ||
| Cisco Catalyst 3650-12x48uq-e | ||
| Cisco Catalyst 3650-12x48uq-l | ||
| Cisco Catalyst 3650-12x48uq-s | ||
| Cisco Catalyst 3650-12x48ur-e | ||
| Cisco Catalyst 3650-12x48ur-l | ||
| Cisco Catalyst 3650-12x48ur-s | ||
| Cisco Catalyst 3650-12x48uz-e | ||
| Cisco Catalyst 3650-24pd-e | ||
| Cisco Catalyst 3650-24pd-l | ||
| Cisco Catalyst 3650-24pd-s | ||
| Cisco Catalyst 3650-24pdm-e | ||
| Cisco Catalyst 3650-24pdm-l | ||
| Cisco Catalyst 3650-24pdm-s | ||
| Cisco Catalyst 3650-24ps-e | ||
| Cisco Catalyst 3650-24ps-l | ||
| Cisco Catalyst 3650-24ps-s | ||
| Cisco Catalyst 3650-24td-e | ||
| Cisco Catalyst 3650-24td-l | ||
| Cisco Catalyst 3650-24td-s | ||
| Cisco Catalyst 3650-24ts-e | ||
| Cisco Catalyst 3650-24ts-l | ||
| Cisco Catalyst 3650-24ts-s | ||
| Cisco Catalyst 3650-48fd-e | ||
| Cisco Catalyst 3650-48fd-l | ||
| Cisco Catalyst 3650-48fd-s | ||
| Cisco Catalyst 3650-48fq-e | ||
| Cisco Catalyst 3650-48fq-l | ||
| Cisco Catalyst 3650-48fq-s | ||
| Cisco Catalyst 3650-48fqm-e | ||
| Cisco Catalyst 3650-48fqm-l | ||
| Cisco Catalyst 3650-48fqm-s | ||
| Cisco Catalyst 3650-48fs-e | ||
| Cisco Catalyst 3650-48fs-l | ||
| Cisco Catalyst 3650-48fs-s | ||
| Cisco Catalyst 3650-48pd-e | ||
| Cisco Catalyst 3650-48pd-l | ||
| Cisco Catalyst 3650-48pd-s | ||
| Cisco Catalyst 3650-48pq-e | ||
| Cisco Catalyst 3650-48pq-l | ||
| Cisco Catalyst 3650-48pq-s | ||
| Cisco Catalyst 3650-48ps-e | ||
| Cisco Catalyst 3650-48ps-l | ||
| Cisco Catalyst 3650-48ps-s | ||
| Cisco Catalyst 3650-48td-e | ||
| Cisco Catalyst 3650-48td-l | ||
| Cisco Catalyst 3650-48td-s | ||
| Cisco Catalyst 3650-48tq-e | ||
| Cisco Catalyst 3650-48tq-l | ||
| Cisco Catalyst 3650-48tq-s | ||
| Cisco Catalyst 3650-48ts-e | ||
| Cisco Catalyst 3650-48ts-l | ||
| Cisco Catalyst 3650-48ts-s | ||
| Cisco Catalyst 3650-8x24uq-e | ||
| Cisco Catalyst 3650-8x24uq-l | ||
| Cisco Catalyst 3650-8x24uq-s | ||
| Cisco Catalyst 3850-12s-e | ||
| Cisco Catalyst 3850-12s-s | ||
| Cisco Catalyst 3850-12xs-e | ||
| Cisco Catalyst 3850-12xs-s | ||
| Cisco Catalyst 3850-16xs-e | ||
| Cisco Catalyst 3850-16xs-s | ||
| Cisco Catalyst 3850-24p-e | ||
| Cisco Catalyst 3850-24p-l | ||
| Cisco Catalyst 3850-24p-s | ||
| Cisco Catalyst 3850-24s-e | ||
| Cisco Catalyst 3850-24s-s | ||
| Cisco Catalyst 3850-24t-e | ||
| Cisco Catalyst 3850-24t-l | ||
| Cisco Catalyst 3850-24t-s | ||
| Cisco Catalyst 3850-24u-e | ||
| Cisco Catalyst 3850-24u-l | ||
| Cisco Catalyst 3850-24u-s | ||
| Cisco Catalyst 3850-24xs-e | ||
| Cisco Catalyst 3850-24xs-s | ||
| Cisco Catalyst 3850-24xu-e | ||
| Cisco Catalyst 3850-24xu-l | ||
| Cisco Catalyst 3850-24xu-s | ||
| Cisco Catalyst 3850-32xs-e | ||
| Cisco Catalyst 3850-32xs-s | ||
| Cisco Catalyst 3850-48f-e | ||
| Cisco Catalyst 3850-48f-l | ||
| Cisco Catalyst 3850-48f-s | ||
| Cisco Catalyst 3850-48p-e | ||
| Cisco Catalyst 3850-48p-l | ||
| Cisco Catalyst 3850-48p-s | ||
| Cisco Catalyst 3850-48t-e | ||
| Cisco Catalyst 3850-48t-l | ||
| Cisco Catalyst 3850-48t-s | ||
| Cisco Catalyst 3850-48u-e | ||
| Cisco Catalyst 3850-48u-l | ||
| Cisco Catalyst 3850-48u-s | ||
| Cisco Catalyst 3850-48xs-e | ||
| Cisco Catalyst 3850-48xs-f-e | ||
| Cisco Catalyst 3850-48xs-f-s | ||
| Cisco Catalyst 3850-48xs-s | ||
| Cisco Catalyst 9300 | ||
| Cisco Catalyst 9300-24p-a | ||
| Cisco Catalyst 9300-24p-e | ||
| Cisco Catalyst 9300-24t-a | ||
| Cisco Catalyst 9300-24t-e | ||
| Cisco Catalyst 9300-24u-a | ||
| Cisco Catalyst 9300-24u-e | ||
| Cisco Catalyst 9300-48p-a | ||
| Cisco Catalyst 9300-48p-e | ||
| Cisco Catalyst 9300-48t-a | ||
| Cisco Catalyst 9300-48t-e | ||
| Cisco Catalyst 9300-48u-a | ||
| Cisco Catalyst 9300-48u-e | ||
| Cisco Catalyst 9400 Supervisor Engine-1 | ||
| Cisco Catalyst 9407r | ||
| Cisco Catalyst 9410r | ||
| Cisco Catalyst 9500 | ||
| Cisco Catalyst C3850-12x48u-e | ||
| Cisco Catalyst C3850-12x48u-l | ||
| Cisco Catalyst C3850-12x48u-s | ||
| Cisco Catalyst C9500-12q-a | ||
| Cisco Catalyst C9500-12q-e | ||
| Cisco Catalyst C9500-24q-a | ||
| Cisco Catalyst C9500-24q-e | ||
| Cisco Catalyst C9500-40x-a | ||
| Cisco Catalyst C9500-40x-e | ||
| Cisco Cloud Services R 1000v | ||
| Cisco Ncs 4201 | ||
| Cisco Ncs 4202 | ||
| Cisco Ncs 4206 | ||
| Cisco Ncs 4216 | ||
| Cisco Network Convergence System 520 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2019-12658?
The severity of CVE-2019-12658 is high with a CVSS score of 7.5.
How can an attacker exploit CVE-2019-12658?
An unauthenticated, remote attacker could exploit CVE-2019-12658 to exhaust filesystem resources on an affected device and cause a denial of service (DoS) condition.
Which software versions are affected by CVE-2019-12658?
Cisco IOS XE Software versions 16.6.1 and 16.8.1 are affected by CVE-2019-12658.
Is CVE-2019-12658 a denial of service vulnerability?
Yes, CVE-2019-12658 could allow an attacker to cause a denial of service (DoS) condition on the affected device.
Where can I find more information about CVE-2019-12658?
You can find more information about CVE-2019-12658 on the Cisco Security Advisory page.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/title
- agent/weakness
- agent/severity
- agent/last-modified-date
- agent/references
- agent/author
- agent/tags
- agent/event
- agent/description
- agent/first-publish-date
- vendor/cisco
- canonical/cisco ios xe
- version/cisco ios xe/16.6.1
- version/cisco ios xe/16.8.1
- canonical/cisco 4221 integrated services r
- canonical/cisco 4321 integrated services r
- canonical/cisco 4331 integrated services r
- canonical/cisco 4351 integrated services r
- canonical/cisco 4431 integrated services r
- canonical/cisco 4451-x integrated services r
- canonical/cisco asr 1000
- canonical/cisco asr 1001-hx r
- canonical/cisco asr 1001-x r
- canonical/cisco asr 1002-hx r
- canonical/cisco asr 1002-x r
- canonical/cisco asr 900
- canonical/cisco asr 920-10sz-pd r
- canonical/cisco asr 920-12cz-a r
- canonical/cisco asr 920-12cz-d r
- canonical/cisco asr 920-12sz-im r
- canonical/cisco asr 920-24sz-im r
- canonical/cisco asr 920-24sz-m r
- canonical/cisco asr 920-24tz-m r
- canonical/cisco asr 920-4sz-a r
- canonical/cisco asr 920-4sz-d r
- canonical/cisco catalyst 3650-12x48uq-e
- canonical/cisco catalyst 3650-12x48uq-l
- canonical/cisco catalyst 3650-12x48uq-s
- canonical/cisco catalyst 3650-12x48ur-e
- canonical/cisco catalyst 3650-12x48ur-l
- canonical/cisco catalyst 3650-12x48ur-s
- canonical/cisco catalyst 3650-12x48uz-e
- canonical/cisco catalyst 3650-24pd-e
- canonical/cisco catalyst 3650-24pd-l
- canonical/cisco catalyst 3650-24pd-s
- canonical/cisco catalyst 3650-24pdm-e
- canonical/cisco catalyst 3650-24pdm-l
- canonical/cisco catalyst 3650-24pdm-s
- canonical/cisco catalyst 3650-24ps-e
- canonical/cisco catalyst 3650-24ps-l
- canonical/cisco catalyst 3650-24ps-s
- canonical/cisco catalyst 3650-24td-e
- canonical/cisco catalyst 3650-24td-l
- canonical/cisco catalyst 3650-24td-s
- canonical/cisco catalyst 3650-24ts-e
- canonical/cisco catalyst 3650-24ts-l
- canonical/cisco catalyst 3650-24ts-s
- canonical/cisco catalyst 3650-48fd-e
- canonical/cisco catalyst 3650-48fd-l
- canonical/cisco catalyst 3650-48fd-s
- canonical/cisco catalyst 3650-48fq-e
- canonical/cisco catalyst 3650-48fq-l
- canonical/cisco catalyst 3650-48fq-s
- canonical/cisco catalyst 3650-48fqm-e
- canonical/cisco catalyst 3650-48fqm-l
- canonical/cisco catalyst 3650-48fqm-s
- canonical/cisco catalyst 3650-48fs-e
- canonical/cisco catalyst 3650-48fs-l
- canonical/cisco catalyst 3650-48fs-s
- canonical/cisco catalyst 3650-48pd-e
- canonical/cisco catalyst 3650-48pd-l
- canonical/cisco catalyst 3650-48pd-s
- canonical/cisco catalyst 3650-48pq-e
- canonical/cisco catalyst 3650-48pq-l
- canonical/cisco catalyst 3650-48pq-s
- canonical/cisco catalyst 3650-48ps-e
- canonical/cisco catalyst 3650-48ps-l
- canonical/cisco catalyst 3650-48ps-s
- canonical/cisco catalyst 3650-48td-e
- canonical/cisco catalyst 3650-48td-l
- canonical/cisco catalyst 3650-48td-s
- canonical/cisco catalyst 3650-48tq-e
- canonical/cisco catalyst 3650-48tq-l
- canonical/cisco catalyst 3650-48tq-s
- canonical/cisco catalyst 3650-48ts-e
- canonical/cisco catalyst 3650-48ts-l
- canonical/cisco catalyst 3650-48ts-s
- canonical/cisco catalyst 3650-8x24uq-e
- canonical/cisco catalyst 3650-8x24uq-l
- canonical/cisco catalyst 3650-8x24uq-s
- canonical/cisco catalyst 3850-12s-e
- canonical/cisco catalyst 3850-12s-s
- canonical/cisco catalyst 3850-12xs-e
- canonical/cisco catalyst 3850-12xs-s
- canonical/cisco catalyst 3850-16xs-e
- canonical/cisco catalyst 3850-16xs-s
- canonical/cisco catalyst 3850-24p-e
- canonical/cisco catalyst 3850-24p-l
- canonical/cisco catalyst 3850-24p-s
- canonical/cisco catalyst 3850-24s-e
- canonical/cisco catalyst 3850-24s-s
- canonical/cisco catalyst 3850-24t-e
- canonical/cisco catalyst 3850-24t-l
- canonical/cisco catalyst 3850-24t-s
- canonical/cisco catalyst 3850-24u-e
- canonical/cisco catalyst 3850-24u-l
- canonical/cisco catalyst 3850-24u-s
- canonical/cisco catalyst 3850-24xs-e
- canonical/cisco catalyst 3850-24xs-s
- canonical/cisco catalyst 3850-24xu-e
- canonical/cisco catalyst 3850-24xu-l
- canonical/cisco catalyst 3850-24xu-s
- canonical/cisco catalyst 3850-32xs-e
- canonical/cisco catalyst 3850-32xs-s
- canonical/cisco catalyst 3850-48f-e
- canonical/cisco catalyst 3850-48f-l
- canonical/cisco catalyst 3850-48f-s
- canonical/cisco catalyst 3850-48p-e
- canonical/cisco catalyst 3850-48p-l
- canonical/cisco catalyst 3850-48p-s
- canonical/cisco catalyst 3850-48t-e
- canonical/cisco catalyst 3850-48t-l
- canonical/cisco catalyst 3850-48t-s
- canonical/cisco catalyst 3850-48u-e
- canonical/cisco catalyst 3850-48u-l
- canonical/cisco catalyst 3850-48u-s
- canonical/cisco catalyst 3850-48xs-e
- canonical/cisco catalyst 3850-48xs-f-e
- canonical/cisco catalyst 3850-48xs-f-s
- canonical/cisco catalyst 3850-48xs-s
- canonical/cisco catalyst 9300
- canonical/cisco catalyst 9300-24p-a
- canonical/cisco catalyst 9300-24p-e
- canonical/cisco catalyst 9300-24t-a
- canonical/cisco catalyst 9300-24t-e
- canonical/cisco catalyst 9300-24u-a
- canonical/cisco catalyst 9300-24u-e
- canonical/cisco catalyst 9300-48p-a
- canonical/cisco catalyst 9300-48p-e
- canonical/cisco catalyst 9300-48t-a
- canonical/cisco catalyst 9300-48t-e
- canonical/cisco catalyst 9300-48u-a
- canonical/cisco catalyst 9300-48u-e
- canonical/cisco catalyst 9400 supervisor engine-1
- canonical/cisco catalyst 9407r
- canonical/cisco catalyst 9410r
- canonical/cisco catalyst 9500
- canonical/cisco catalyst c3850-12x48u-e
- canonical/cisco catalyst c3850-12x48u-l
- canonical/cisco catalyst c3850-12x48u-s
- canonical/cisco catalyst c9500-12q-a
- canonical/cisco catalyst c9500-12q-e
- canonical/cisco catalyst c9500-24q-a
- canonical/cisco catalyst c9500-24q-e
- canonical/cisco catalyst c9500-40x-a
- canonical/cisco catalyst c9500-40x-e
- canonical/cisco cloud services r 1000v
- canonical/cisco ncs 4201
- canonical/cisco ncs 4202
- canonical/cisco ncs 4206
- canonical/cisco ncs 4216
- canonical/cisco network convergence system 520