CVE-2019-1687

HighCVSS 7.5/10Last modified Aug 11, 2026

Description

A vulnerability in the TCP proxy functionality for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to restart unexpectedly, resulting in a denial of service (DoS) condition. The vulnerability is due to an error in TCP-based packet inspection, which could cause the TCP packet to have an invalid Layer 2 (L2)-formatted header. An attacker could exploit this vulnerability by sending a crafted TCP packet sequence to the targeted device. A successful exploit could allow the attacker to cause a DoS condition.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published
May 3, 2019
Last modified
Aug 11, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-168719.8Beckhoff Embedded Windows PLCs through 3.1.4024.0, and Beckhoff Twincat on Windows Engineering stations, allow an attacker to achieve RemoteCVE-2019-168729.9Portainer before 1.22.1 has Incorrect Access Control (issue 1 of 4).CVE-2019-168735.4Portainer before 1.22.1 has XSS (issue 1 of 2).CVE-2019-168746.5Portainer before 1.22.1 has Incorrect Access Control (issue 2 of 4).CVE-2019-168767.5Portainer before 1.22.1 allows Directory Traversal.CVE-2019-168778.8Portainer before 1.22.1 has Incorrect Access Control (issue 4 of 4).CVE-2019-168785.4Portainer before 1.22.1 has XSS (issue 2 of 2).CVE-2019-168799.8The Synergy Systems & Solutions (SSS) HUSKY RTU 6049-E70, with firmware Versions 5.0 and prior, has a Missing Authentication for Critical FuCVE-2019-16887.1A vulnerability in the management web interface of Cisco Network Assurance Engine (NAE) could allow an unauthenticated, local attacker to gaCVE-2019-168809.8An issue was discovered in the linea crate through 0.9.4 for Rust. There is double free in the Matrix::zip_elements method.CVE-2019-168819.8An issue was discovered in the portaudio-rs crate through 0.3.1 for Rust. There is a use-after-free with resultant arbitrary code execution CVE-2019-168827.5An issue was discovered in the string-interner crate before 0.7.1 for Rust. It allows attackers to read from memory locations associated wit