Cisco IOS and IOS XE Software Multiple Denial of Service Vulnerabilities

Bugtraq ID:	107597
Class:	Design Error
CVE:	CVE-2019-1738 CVE-2019-1739 CVE-2019-1740
Remote:	Yes
Local:	No
Published:	Mar 27 2019 12:00AM
Updated:	Mar 27 2019 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	Cisco Ios Xe 16.6.1 Cisco Ios Xe 16.5 Cisco Ios 15.5(3)S3.8 Cisco Ios 15.3(3)S4.1 Cisco ASR 1000 Series Routers 0
Not Vulnerable:

Cisco IOS and IOS XE Software Multiple Denial of Service Vulnerabilities

Cisco IOS and IOS XE Software are prone to multiple denial-of-service vulnerabilities.

Attackers can exploit these issues to reload the affected device, denying service to legitimate users.

This issue is being tracked by Cisco Bug IDs CSCvb51688, CSCvc94856, CSCvc99155, CSCvf01501.

Cisco IOS and IOS XE Software Multiple Denial of Service Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Cisco IOS and IOS XE Software Multiple Denial of Service Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco IOS and IOS XE Software Multiple Denial of Service Vulnerabilities

References:

• Cisco Homepage (Cisco )
  
• Cisco IOS and IOS XE Software Network-Based Application Recognition Denial of Se (Cisco)