MEDIUM
Cisco IOS XE Software Performance Routing Version 3 Denial of Service Vulnerability
Published Mar 28, 2019
6.8
MEDIUMCVSS 3.0
EPSS 2.14%
Description
A vulnerability in Performance Routing Version 3 (PfRv3) of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the affected device to reload. The vulnerability is due to the processing of malformed smart probe packets. An attacker could exploit this vulnerability by sending specially crafted smart probe packets at the affected device. A successful exploit could allow the attacker to reload the device, resulting in a denial of service (DoS) attack on an affected system.
Affected products
-
- Version 16.3.2StatusaffectedConstraints-
- Version 16.3.3StatusaffectedConstraints-
- Version 16.3.4StatusaffectedConstraints-
- Version 16.3.5StatusaffectedConstraints-
- Version 16.3.5bStatusaffectedConstraints-
- Version 16.3.6StatusaffectedConstraints-
- Version 16.4.1StatusaffectedConstraints-
- Version 16.4.2StatusaffectedConstraints-
- Version 16.4.3StatusaffectedConstraints-
- Version 16.5.1StatusaffectedConstraints-
- Version 16.5.1aStatusaffectedConstraints-
- Version 16.5.1bStatusaffectedConstraints-
- Version 16.5.2StatusaffectedConstraints-
- Version 16.5.3StatusaffectedConstraints-
- Version 16.6.1StatusaffectedConstraints-
- Version 16.6.2StatusaffectedConstraints-
- Version 16.6.3StatusaffectedConstraints-
- Version 16.7.1StatusaffectedConstraints-
- Version 16.7.1aStatusaffectedConstraints-
- Version 16.7.1bStatusaffectedConstraints-
- Version 16.8.1StatusaffectedConstraints-
- Version 16.8.1aStatusaffectedConstraints-
- Version 16.8.1bStatusaffectedConstraints-
- Version 16.8.1cStatusaffectedConstraints-
- Version 16.8.1sStatusaffectedConstraints-
- Version 3.16.4SStatusaffectedConstraints-
- Version 3.16.4aSStatusaffectedConstraints-
- Version 3.16.4bSStatusaffectedConstraints-
- Version 3.16.4cSStatusaffectedConstraints-
- Version 3.16.4dSStatusaffectedConstraints-
- Version 3.16.4eSStatusaffectedConstraints-
- Version 3.16.4gSStatusaffectedConstraints-
- Version 3.16.5SStatusaffectedConstraints-
- Version 3.16.5aSStatusaffectedConstraints-
- Version 3.16.5bSStatusaffectedConstraints-
- Version 3.16.6SStatusaffectedConstraints-
- Version 3.16.6bSStatusaffectedConstraints-
- Version 3.16.7SStatusaffectedConstraints-
- Version 3.16.7aSStatusaffectedConstraints-
- Version 3.16.7bSStatusaffectedConstraints-
- Version 3.2.0JAStatusaffectedConstraints-
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Cisco | Cisco IOS XE Software | n/a |
|
OR
- 3.2.0ja
- 3.16.4as
- 3.16.4bs
- 3.16.4cs
- 3.16.4ds
- 3.16.4es
- 3.16.4gs
- 3.16.4s
- 3.16.5as
- 3.16.5bs
- 3.16.5s
- 3.16.6bs
- 3.16.6s
- 3.16.7as
- 3.16.7bs
- 3.16.7s
- 16.3.2
- 16.3.3
- 16.3.4
- 16.3.5
- 16.3.5b
- 16.3.6
- 16.4.1
- 16.4.2
- 16.4.3
- 16.5.1
- 16.5.1a
- 16.5.1b
- 16.5.2
- 16.5.3
- 16.6.1
- 16.6.2
- 16.6.3
- 16.7.1
- 16.7.1a
- 16.7.1b
- 16.8.1
- 16.8.1a
- 16.8.1b
- 16.8.1c
- 16.8.1s
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (2)
- http://www.securityfocus.com/bid/107611 vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190327-pfrv3 vendor-advisoryx_refsource_CISCOPatchVendor Advisory
| Link | Providers | Tags |
|---|---|---|
| http://www.securityfocus.com/bid/107611 | vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry | |
| https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190327-pfrv3 | vendor-advisoryx_refsource_CISCOPatchVendor Advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner cisco
Published Mar 28, 2019
Updated Nov 21, 2024
Reserved Dec 6, 2018
Link CVE-2019-1760
CISA Vulnrichment
Updated Nov 21, 2024