high
7.7
CWE
20
Advisory Published
Updated

CVE-2019-16027: Input Validation

First published: Sun Jan 26 2020(Updated: )

A vulnerability in the implementation of the Intermediate System–to–Intermediate System (IS–IS) routing protocol functionality in Cisco IOS XR Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition in the IS–IS process. The vulnerability is due to improper handling of a Simple Network Management Protocol (SNMP) request for specific Object Identifiers (OIDs) by the IS–IS process. An attacker could exploit this vulnerability by sending a crafted SNMP request to the affected device. A successful exploit could allow the attacker to cause a DoS condition in the IS–IS process.

Credit: ykramarz@cisco.com

Affected SoftwareAffected VersionHow to fix
Cisco IOS XR=4.3.2
Cisco Xr 12404
Cisco Xr 12406
Cisco Xr 12410
Cisco Xr 12416
Cisco IOS XR=5.2.5
Cisco IOS XR=6.2.2
Cisco IOS XR=6.2.3
Cisco IOS XR=6.2.25
Cisco IOS XR=6.3.3
Cisco IOS XR=6.4.2
Cisco Ncs 6000
Cisco Ncs 6008
Cisco IOS XR=6.1.3
Cisco IOS XR=6.1.4
Cisco IOS XR=6.5.2
Cisco IOS XR=6.5.3
Cisco Ncs 5001
Cisco Ncs 5002
Cisco Ncs 5011
Cisco IOS XR=6.3.15
Cisco IOS XR=6.6.1
Cisco IOS XR=6.6.25
Cisco Ncs 5500
Cisco Ncs 5501
Cisco Ncs 5502
Cisco Ncs 5508
Cisco Ncs 5516
Cisco Crs
Cisco IOS XR=6.6.2
Cisco Xrv 9000
Cisco Ncs 540
Cisco Ncs 560
Cisco IOS XR=6.1.2
Cisco IOS XR=6.3.2
Cisco ASR 9000
Cisco Asr 9000v=v2
Cisco Asr 9001
Cisco Asr 9006
Cisco Asr 9010
Cisco Asr 9901
Cisco Asr 9903
Cisco Asr 9904
Cisco Asr 9906
Cisco Asr 9910
Cisco Asr 9912
Cisco Asr 9920
Cisco Asr 9922

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is CVE-2019-16027?

    CVE-2019-16027 is a vulnerability in the implementation of the Intermediate System-to-Intermediate System (IS-IS) routing protocol functionality in Cisco IOS XR Software.

  • What is the severity of CVE-2019-16027?

    The severity of CVE-2019-16027 is high with a severity value of 6.5.

  • How does CVE-2019-16027 impact Cisco IOS XR Software?

    CVE-2019-16027 can allow an authenticated, remote attacker to cause a denial of service (DoS) condition in the IS-IS process.

  • Which versions of Cisco IOS XR Software are affected by CVE-2019-16027?

    Cisco IOS XR Software versions 4.3.2, 5.2.5, 6.2.2, 6.2.3, 6.2.25, 6.3.3, 6.4.2, 6.1.3, 6.1.4, 6.5.2, 6.5.3, 6.3.15, 6.6.1, 6.6.25, 6.6.2 are affected by CVE-2019-16027.

  • How can I fix CVE-2019-16027 in Cisco IOS XR Software?

    To fix CVE-2019-16027 in Cisco IOS XR Software, please refer to the Cisco Security Advisory for remediation steps.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203