CVE-2019-1740: Cisco IOS and IOS XE Software Network-Based Application Recognition Denial of Service Vulnerabilities
First published: Wed Mar 27 2019(Updated: )
A vulnerability in the Network-Based Application Recognition (NBAR) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. This vulnerability are due to a parsing issue on DNS packets. An attacker could exploit this vulnerability by sending crafted DNS packets through routers that are running an affected version and have NBAR enabled. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition.
Credit: ykramarz@cisco.com ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco IOS XE Software | =3.2.0ja | |
| Cisco IOS XE Software | =3.16.0as | |
| Cisco IOS XE Software | =3.16.0bs | |
| Cisco IOS XE Software | =3.16.0cs | |
| Cisco IOS XE Software | =3.16.0s | |
| Cisco IOS XE Software | =3.16.1as | |
| Cisco IOS XE Software | =3.16.1s | |
| Cisco IOS XE Software | =3.16.2as | |
| Cisco IOS XE Software | =3.16.2bs | |
| Cisco IOS XE Software | =3.16.2s | |
| Cisco IOS XE Software | =3.16.3as | |
| Cisco IOS XE Software | =3.16.3s | |
| Cisco IOS XE Software | =3.16.4as | |
| Cisco IOS XE Software | =3.16.4bs | |
| Cisco IOS XE Software | =3.16.4cs | |
| Cisco IOS XE Software | =3.16.4ds | |
| Cisco IOS XE Software | =3.16.4es | |
| Cisco IOS XE Software | =3.16.4gs | |
| Cisco IOS XE Software | =3.16.4s | |
| Cisco IOS XE Software | =3.16.5as | |
| Cisco IOS XE Software | =3.16.5s | |
| Cisco IOS XE Software | =3.17.0s | |
| Cisco IOS XE Software | =3.17.1as | |
| Cisco IOS XE Software | =3.17.1s | |
| Cisco IOS XE Software | =3.17.2s | |
| Cisco IOS XE Software | =3.17.3s | |
| Cisco IOS XE Software | =3.17.4s | |
| Cisco IOS XE Software | =3.18.0as | |
| Cisco IOS XE Software | =3.18.0s | |
| Cisco IOS XE Software | =3.18.0sp | |
| Cisco IOS XE Software | =3.18.1asp | |
| Cisco IOS XE Software | =3.18.1bsp | |
| Cisco IOS XE Software | =3.18.1csp | |
| Cisco IOS XE Software | =3.18.1gsp | |
| Cisco IOS XE Software | =3.18.1hsp | |
| Cisco IOS XE Software | =3.18.1isp | |
| Cisco IOS XE Software | =3.18.1s | |
| Cisco IOS XE Software | =3.18.1sp | |
| Cisco IOS XE Software | =3.18.2asp | |
| Cisco IOS XE Software | =3.18.2s | |
| Cisco IOS XE Software | =3.18.2sp | |
| Cisco IOS XE Software | =3.18.3s | |
| Cisco IOS XE Software | =3.18.4s | |
| Cisco IOS XE Software | =16.2.1 | |
| Cisco IOS XE Software | =16.2.2 | |
| Cisco IOS XE Software | =16.3.1 | |
| Cisco IOS XE Software | =16.3.1a | |
| Cisco IOS XE Software | =16.3.2 | |
| Cisco IOS XE Software | =16.3.3 | |
| Cisco IOS XE Software | =16.3.4 | |
| Cisco IOS XE Software | =16.4.1 | |
| Cisco IOS XE Software | =16.4.2 | |
| Cisco IOS XE Software | =16.4.3 | |
| Cisco IOS XE Software | =16.5.1 | |
| Cisco IOS XE Software | =16.5.1a | |
| Cisco IOS XE Software | =16.5.1b | |
| Cisco IOS XE Software | =16.9.3s | |
| Cisco IOS XE Software | =16.9.4c | |
| Cisco IOS | =15.3\(3\)jd | |
| Cisco IOS | =15.3\(3\)jd2 | |
| Cisco IOS | =15.3\(3\)jd3 | |
| Cisco IOS | =15.3\(3\)jd4 | |
| Cisco IOS | =15.3\(3\)jd5 | |
| Cisco IOS | =15.3\(3\)jd6 | |
| Cisco IOS | =15.3\(3\)jd7 | |
| Cisco IOS | =15.3\(3\)jd8 | |
| Cisco IOS | =15.3\(3\)jd9 | |
| Cisco IOS | =15.3\(3\)jd11 | |
| Cisco IOS | =15.3\(3\)jd12 | |
| Cisco IOS | =15.3\(3\)jd13 | |
| Cisco IOS | =15.3\(3\)jd14 | |
| Cisco IOS | =15.3\(3\)je | |
| Cisco IOS | =15.3\(3\)jf | |
| Cisco IOS | =15.3\(3\)jf1 | |
| Cisco IOS | =15.3\(3\)jf2 | |
| Cisco IOS | =15.3\(3\)jf4 | |
| Cisco IOS | =15.3\(3\)jf5 | |
| Cisco IOS | =15.3\(3\)jg | |
| Cisco IOS | =15.3\(3\)jg1 | |
| Cisco IOS | =15.3\(3\)jh | |
| Cisco IOS | =15.3\(3\)jk6 | |
| Cisco IOS | =15.3\(3\)jnp | |
| Cisco IOS | =15.3\(3\)jnp1 | |
| Cisco IOS | =15.3\(3\)jnp3 | |
| Cisco IOS | =15.3\(3\)jpb | |
| Cisco IOS | =15.3\(3\)jpb1 | |
| Cisco IOS | =15.3\(3\)jpc | |
| Cisco IOS | =15.3\(3\)jpc1 | |
| Cisco IOS | =15.3\(3\)jpc2 | |
| Cisco IOS | =15.3\(3\)jpc3 | |
| Cisco IOS | =15.3\(3\)jpc5 | |
| Cisco IOS | =15.3\(3\)jpd | |
| Cisco IOS | =15.5\(3\)m | |
| Cisco IOS | =15.5\(3\)m0a | |
| Cisco IOS | =15.5\(3\)m1 | |
| Cisco IOS | =15.5\(3\)m2 | |
| Cisco IOS | =15.5\(3\)m2a | |
| Cisco IOS | =15.5\(3\)m3 | |
| Cisco IOS | =15.5\(3\)m4 | |
| Cisco IOS | =15.5\(3\)m4a | |
| Cisco IOS | =15.5\(3\)m4b | |
| Cisco IOS | =15.5\(3\)m4c | |
| Cisco IOS | =15.5\(3\)m5 | |
| Cisco IOS | =15.5\(3\)s | |
| Cisco IOS | =15.5\(3\)s0a | |
| Cisco IOS | =15.5\(3\)s1 | |
| Cisco IOS | =15.5\(3\)s1a | |
| Cisco IOS | =15.5\(3\)s2 | |
| Cisco IOS | =15.5\(3\)s3 | |
| Cisco IOS | =15.5\(3\)s4 | |
| Cisco IOS | =15.5\(3\)s5 | |
| Cisco IOS | =15.5\(3\)sn | |
| Cisco IOS | =15.5\(3\)sn0a | |
| Cisco IOS | =15.6\(1\)s | |
| Cisco IOS | =15.6\(1\)s1 | |
| Cisco IOS | =15.6\(1\)s2 | |
| Cisco IOS | =15.6\(1\)s3 | |
| Cisco IOS | =15.6\(1\)s4 | |
| Cisco IOS | =15.6\(1\)sn | |
| Cisco IOS | =15.6\(1\)sn1 | |
| Cisco IOS | =15.6\(1\)sn2 | |
| Cisco IOS | =15.6\(1\)sn3 | |
| Cisco IOS | =15.6\(1\)t | |
| Cisco IOS | =15.6\(1\)t0a | |
| Cisco IOS | =15.6\(1\)t1 | |
| Cisco IOS | =15.6\(1\)t2 | |
| Cisco IOS | =15.6\(2\)s | |
| Cisco IOS | =15.6\(2\)s1 | |
| Cisco IOS | =15.6\(2\)s2 | |
| Cisco IOS | =15.6\(2\)s3 | |
| Cisco IOS | =15.6\(2\)s4 | |
| Cisco IOS | =15.6\(2\)sn | |
| Cisco IOS | =15.6\(2\)t | |
| Cisco IOS | =15.6\(2\)t0a | |
| Cisco IOS | =15.6\(2\)t1 | |
| Cisco IOS | =15.6\(2\)t2 | |
| Cisco IOS | =15.6\(3\)m | |
| Cisco IOS | =15.6\(3\)m0a | |
| Cisco IOS | =15.6\(3\)m1 | |
| Cisco IOS | =15.6\(3\)m1a | |
| Cisco IOS | =15.6\(3\)m1b | |
| Cisco IOS | =15.6\(3\)sn | |
| Cisco IOS | =15.6\(4\)sn | |
| Cisco IOS | =15.6\(5\)sn | |
| Cisco IOS | =15.6\(6\)sn | |
| Cisco IOS | =15.6\(7\)sn | |
| Cisco IOS | =15.6\(7\)sn1 | |
| Cisco IOS | =15.6\(7\)sn2 | |
| Cisco IOS | =15.6\(7\)sn3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2019-1740?
CVE-2019-1740 is classified as a high severity vulnerability due to its potential to cause a device to reload unexpectedly.
How do I fix CVE-2019-1740?
To fix CVE-2019-1740, users should upgrade to the fixed version of the affected Cisco IOS Software or Cisco IOS XE Software as recommended in the security advisory.
Who is affected by CVE-2019-1740?
CVE-2019-1740 affects devices running vulnerable versions of Cisco IOS Software and Cisco IOS XE Software that utilize the Network-Based Application Recognition (NBAR) feature.
What type of vulnerability is CVE-2019-1740?
CVE-2019-1740 is a remote denial of service vulnerability caused by improper parsing of DNS packets.
Can CVE-2019-1740 be exploited remotely?
Yes, CVE-2019-1740 can be exploited by unauthenticated attackers remotely, leading to a device reload.
- agent/references
- agent/type
- agent/weakness
- agent/remedy
- agent/description
- agent/title
- agent/severity
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/last-modified-date
- agent/event
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/cisco
- canonical/cisco ios xe
- version/cisco ios xe/3.2.0ja
- version/cisco ios xe/3.16.0as
- version/cisco ios xe/3.16.0bs
- version/cisco ios xe/3.16.0cs
- version/cisco ios xe/3.16.0s
- version/cisco ios xe/3.16.1as
- version/cisco ios xe/3.16.1s
- version/cisco ios xe/3.16.2as
- version/cisco ios xe/3.16.2bs
- version/cisco ios xe/3.16.2s
- version/cisco ios xe/3.16.3as
- version/cisco ios xe/3.16.3s
- version/cisco ios xe/3.16.4as
- version/cisco ios xe/3.16.4bs
- version/cisco ios xe/3.16.4cs
- version/cisco ios xe/3.16.4ds
- version/cisco ios xe/3.16.4es
- version/cisco ios xe/3.16.4gs
- version/cisco ios xe/3.16.4s
- version/cisco ios xe/3.16.5as
- version/cisco ios xe/3.16.5s
- version/cisco ios xe/3.17.0s
- version/cisco ios xe/3.17.1as
- version/cisco ios xe/3.17.1s
- version/cisco ios xe/3.17.2s
- version/cisco ios xe/3.17.3s
- version/cisco ios xe/3.17.4s
- version/cisco ios xe/3.18.0as
- version/cisco ios xe/3.18.0s
- version/cisco ios xe/3.18.0sp
- version/cisco ios xe/3.18.1asp
- version/cisco ios xe/3.18.1bsp
- version/cisco ios xe/3.18.1csp
- version/cisco ios xe/3.18.1gsp
- version/cisco ios xe/3.18.1hsp
- version/cisco ios xe/3.18.1isp
- version/cisco ios xe/3.18.1s
- version/cisco ios xe/3.18.1sp
- version/cisco ios xe/3.18.2asp
- version/cisco ios xe/3.18.2s
- version/cisco ios xe/3.18.2sp
- version/cisco ios xe/3.18.3s
- version/cisco ios xe/3.18.4s
- version/cisco ios xe/16.2.1
- version/cisco ios xe/16.2.2
- version/cisco ios xe/16.3.1
- version/cisco ios xe/16.3.1a
- version/cisco ios xe/16.3.2
- version/cisco ios xe/16.3.3
- version/cisco ios xe/16.3.4
- version/cisco ios xe/16.4.1
- version/cisco ios xe/16.4.2
- version/cisco ios xe/16.4.3
- version/cisco ios xe/16.5.1
- version/cisco ios xe/16.5.1a
- version/cisco ios xe/16.5.1b
- version/cisco ios xe/16.9.3s
- version/cisco ios xe/16.9.4c
- canonical/cisco ios
- version/cisco ios/15.3\(3\)jd
- version/cisco ios/15.3\(3\)jd2
- version/cisco ios/15.3\(3\)jd3
- version/cisco ios/15.3\(3\)jd4
- version/cisco ios/15.3\(3\)jd5
- version/cisco ios/15.3\(3\)jd6
- version/cisco ios/15.3\(3\)jd7
- version/cisco ios/15.3\(3\)jd8
- version/cisco ios/15.3\(3\)jd9
- version/cisco ios/15.3\(3\)jd11
- version/cisco ios/15.3\(3\)jd12
- version/cisco ios/15.3\(3\)jd13
- version/cisco ios/15.3\(3\)jd14
- version/cisco ios/15.3\(3\)je
- version/cisco ios/15.3\(3\)jf
- version/cisco ios/15.3\(3\)jf1
- version/cisco ios/15.3\(3\)jf2
- version/cisco ios/15.3\(3\)jf4
- version/cisco ios/15.3\(3\)jf5
- version/cisco ios/15.3\(3\)jg
- version/cisco ios/15.3\(3\)jg1
- version/cisco ios/15.3\(3\)jh
- version/cisco ios/15.3\(3\)jk6
- version/cisco ios/15.3\(3\)jnp
- version/cisco ios/15.3\(3\)jnp1
- version/cisco ios/15.3\(3\)jnp3
- version/cisco ios/15.3\(3\)jpb
- version/cisco ios/15.3\(3\)jpb1
- version/cisco ios/15.3\(3\)jpc
- version/cisco ios/15.3\(3\)jpc1
- version/cisco ios/15.3\(3\)jpc2
- version/cisco ios/15.3\(3\)jpc3
- version/cisco ios/15.3\(3\)jpc5
- version/cisco ios/15.3\(3\)jpd
- version/cisco ios/15.5\(3\)m
- version/cisco ios/15.5\(3\)m0a
- version/cisco ios/15.5\(3\)m1
- version/cisco ios/15.5\(3\)m2
- version/cisco ios/15.5\(3\)m2a
- version/cisco ios/15.5\(3\)m3
- version/cisco ios/15.5\(3\)m4
- version/cisco ios/15.5\(3\)m4a
- version/cisco ios/15.5\(3\)m4b
- version/cisco ios/15.5\(3\)m4c
- version/cisco ios/15.5\(3\)m5
- version/cisco ios/15.5\(3\)s
- version/cisco ios/15.5\(3\)s0a
- version/cisco ios/15.5\(3\)s1
- version/cisco ios/15.5\(3\)s1a
- version/cisco ios/15.5\(3\)s2
- version/cisco ios/15.5\(3\)s3
- version/cisco ios/15.5\(3\)s4
- version/cisco ios/15.5\(3\)s5
- version/cisco ios/15.5\(3\)sn
- version/cisco ios/15.5\(3\)sn0a
- version/cisco ios/15.6\(1\)s
- version/cisco ios/15.6\(1\)s1
- version/cisco ios/15.6\(1\)s2
- version/cisco ios/15.6\(1\)s3
- version/cisco ios/15.6\(1\)s4
- version/cisco ios/15.6\(1\)sn
- version/cisco ios/15.6\(1\)sn1
- version/cisco ios/15.6\(1\)sn2
- version/cisco ios/15.6\(1\)sn3
- version/cisco ios/15.6\(1\)t
- version/cisco ios/15.6\(1\)t0a
- version/cisco ios/15.6\(1\)t1
- version/cisco ios/15.6\(1\)t2
- version/cisco ios/15.6\(2\)s
- version/cisco ios/15.6\(2\)s1
- version/cisco ios/15.6\(2\)s2
- version/cisco ios/15.6\(2\)s3
- version/cisco ios/15.6\(2\)s4
- version/cisco ios/15.6\(2\)sn
- version/cisco ios/15.6\(2\)t
- version/cisco ios/15.6\(2\)t0a
- version/cisco ios/15.6\(2\)t1
- version/cisco ios/15.6\(2\)t2
- version/cisco ios/15.6\(3\)m
- version/cisco ios/15.6\(3\)m0a
- version/cisco ios/15.6\(3\)m1
- version/cisco ios/15.6\(3\)m1a
- version/cisco ios/15.6\(3\)m1b
- version/cisco ios/15.6\(3\)sn
- version/cisco ios/15.6\(4\)sn
- version/cisco ios/15.6\(5\)sn
- version/cisco ios/15.6\(6\)sn
- version/cisco ios/15.6\(7\)sn
- version/cisco ios/15.6\(7\)sn1
- version/cisco ios/15.6\(7\)sn2
- version/cisco ios/15.6\(7\)sn3