CVE-2019-1739

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A vulnerability in the Network-Based Application Recognition (NBAR) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. This vulnerability is due to a parsing issue on DNS packets. An attacker could exploit this vulnerability by sending crafted DNS packets through routers that are running an affected version and have NBAR enabled. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published: Mar 28, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-173907.8An issue was discovered in the Outlook add-in in Pronestor Planner before 8.1.77. There is local privilege escalation in the Health Monitor CVE-2019-173914.6An issue was discovered in the Espressif ESP32 mask ROM code 2016-06-08 0 through 2. Lack of anti-glitch mitigations in the first stage boot CVE-2019-173929.8Progress Sitefinity 12.1 has a Weak Password Recovery Mechanism for a Forgotten Password because the HTTP Host header is mishandled.CVE-2019-173939.8The Customer's Tomedo Server in Version 1.7.3 communicates to the Vendor Tomedo Server via HTTP (in cleartext) that can be sniffed by unauth CVE-2019-173949.8In the Seesaw Parent and Family application 6.2.5 for Android, the username and password are stored in the log during authentication, and ma CVE-2019-173959.8In the Rapid Gator application 0.7.1 for Android, the username and password are stored in the log during authentication, and may be availabl CVE-2019-173969.8In the PowerSchool Mobile application 1.1.8 for Android, the username and password are stored in the log during authentication, and may be a CVE-2019-173979.8In the DoorDash application through 11.5.2 for Android, the username and password are stored in the log during authentication, and may be av CVE-2019-173989.8In the Dark Horse Comics application 1.3.21 for Android, token information (equivalent to the username and password) is stored in the log du CVE-2019-173999.8The Shack Forms Pro extension before 4.0.32 for Joomla! allows path traversal via a file attachment.CVE-2019-17408.6A vulnerability in the Network-Based Application Recognition (NBAR) feature of Cisco IOS Software and Cisco IOS XE Software could allow an u CVE-2019-174007.5The unoconv package before 0.9 mishandles untrusted pathnames, leading to SSRF and local file inclusion.