Vulnslist

find the latest Cisco vulnerabilities

Cisco FXOS and NX-OS Software Simple Network Management Protocol Denial of Service Vulnerability

cisco-sa-20190515-nxos-snmp-dos · High · Published · Updated

A vulnerability in the Simple Network Management Protocol (SNMP) input packet processor of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause the SNMP application to leak system memory, which could cause an affected device to restart unexpectedly. The vulnerability is due to improper error handling when processing inbound SNMP packets. An attacker could exploit this vulnerability by sending multiple crafted SNMP packets to an affected device. A successful exploit could allow the attacker to cause the SNMP application to leak system memory because of an improperly handled error condition during packet processing. Over time, this memory leak could cause the SNMP application to restart multiple times, leading to a system-level restart and a denial of service (DoS) condition. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190515-nxos-snmp-dos

Cisco advisory · CSAF JSON

Workarounds

There are no workarounds that address this vulnerability.

As a mitigation for the vulnerability that is described in this advisory, administrators can configure an access control list (ACL) on an SNMP community to filter incoming SNMP requests to ensure that SNMP polling is performed only by trusted SNMP clients. In the following example, the device will accept incoming SNMP requests only from a single trusted host, 192.168.1.2:

switch# show access-list acl_for_snmp
IPV4 ACL acl_for_snmp
10 permit udp 192.168.1.2/32 192.168.1.3/32 eq snmp
To implement the preceding ACL, administrators can add it to the snmp-server community configuration command:

switch# show running-config snmp
!Command: show running-config snmp
snmp-server community mycompany
use-acl acl_for_snmp
For additional information about configuring ACLs to filter incoming SNMP requests, see Filtering SNMP Requests ["https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus5000/sw/system_management/b_Cisco_Nexus_5000_Series_NX-OS_System_Management_Configuration_Guide/Cisco_Nexus_5000_Series_NX-OS_System_Management_Configuration_Guide_chapter9.html#task_D3862190751F4B1A9F5353B015A888A7"] in the NX-OS Configuration Guide.

CVEsCVE-2019-1858
Cisco Bug IDsCSCvn19463, CSCvd45657, CSCvn19464, CSCvn19465, CSCvc58707, CSCvn19468, CSCvn19457, CSCvn19483
CVSS ScoreBase 8.6
Base 8.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H/E:X/RL:X/RC:X
Product Names From Source
Cisco NX-OS Software 5.0(2a), Cisco NX-OS Software 5.0(3), Cisco NX-OS Software 5.0(5), Cisco NX-OS Software 5.0(2), Cisco NX-OS Software 4.2(3), Cisco NX-OS Software 4.2(4), Cisco NX-OS Software 4.2(6), Cisco NX-OS Software 4.2(8), Cisco NX-OS Software 5.1(1), Cisco NX-OS Software 5.1(1a), Cisco NX-OS Software 5.1(3), Cisco NX-OS Software 5.1(4), Cisco NX-OS Software 5.1(5), Cisco NX-OS Software 5.1(6), Cisco NX-OS Software 5.1(2), Cisco NX-OS Software 5.2(3a), Cisco NX-OS Software 5.2(4), Cisco NX-OS Software 5.2(5), Cisco NX-OS Software 5.2(7), Cisco NX-OS Software 5.2(9), Cisco NX-OS Software 5.2(3), Cisco NX-OS Software 5.2(9a), Cisco NX-OS Software 6.1(1), Cisco NX-OS Software 6.1(2), Cisco NX-OS Software 6.1(3), Cisco NX-OS Software 6.1(4), Cisco NX-OS Software 6.1(4a), Cisco NX-OS Software 6.1(5), Cisco NX-OS Software 6.1(5a), Cisco NX-OS Software 4.0(0)N1(1a), Cisco NX-OS Software 4.0(0)N1(2), Cisco NX-OS Software 4.0(0)N1(2a), Cisco NX-OS Software 4.0(1a)N1(1), Cisco NX-OS Software 4.0(1a)N1(1a), Cisco NX-OS Software 4.0(1a)N2(1), Cisco NX-OS Software 4.0(1a)N2(1a), Cisco NX-OS Software 4.1(3)N1(1), Cisco NX-OS Software 4.1(3)N1(1a), Cisco NX-OS Software 4.1(3)N2(1), Cisco NX-OS Software 4.1(3)N2(1a), Cisco NX-OS Software 4.2(1)N1(1), Cisco NX-OS Software 4.2(1)N2(1), Cisco NX-OS Software 4.2(1)N2(1a), Cisco NX-OS Software 5.0(2)N1(1), Cisco NX-OS Software 5.0(2)N2(1), Cisco NX-OS Software 5.0(2)N2(1a), Cisco NX-OS Software 5.0(3)N1(1c), Cisco NX-OS Software 5.0(3)N1(1), Cisco NX-OS Software 5.0(3)N1(1a), Cisco NX-OS Software 5.0(3)N1(1b), Cisco NX-OS Software 5.0(3)N2(1), Cisco NX-OS Software 5.0(3)N2(2), Cisco NX-OS Software 5.0(3)N2(2a), Cisco NX-OS Software 5.0(3)N2(2b), Cisco NX-OS Software 5.1(3)N1(1), Cisco NX-OS Software 5.1(3)N1(1a), Cisco NX-OS Software 5.1(3)N2(1), Cisco NX-OS Software 5.1(3)N2(1a), Cisco NX-OS Software 5.1(3)N2(1b), Cisco NX-OS Software 5.1(3)N2(1c), Cisco NX-OS Software 5.2(1)N1(1), Cisco NX-OS Software 5.2(1)N1(1a), Cisco NX-OS Software 5.2(1)N1(1b), Cisco NX-OS Software 5.2(1)N1(2), Cisco NX-OS Software 5.2(1)N1(2a), Cisco NX-OS Software 5.2(1)N1(3), Cisco NX-OS Software 5.2(1)N1(4), Cisco NX-OS Software 5.2(1)N1(5), Cisco NX-OS Software 5.2(1)N1(6), Cisco NX-OS Software 5.2(1)N1(7), Cisco NX-OS Software 5.2(1)N1(8a), Cisco NX-OS Software 5.2(1)N1(8), Cisco NX-OS Software 5.2(1)N1(8b), Cisco NX-OS Software 5.2(1)N1(9), Cisco NX-OS Software 5.2(1)N1(9a), Cisco NX-OS Software 5.2(1)N1(9b), Cisco NX-OS Software 5.2(1)SV3(1.3a), Cisco NX-OS Software 5.2(1)SV3(1.3b), Cisco NX-OS Software 5.2(1)SV3(1.3c), Cisco NX-OS Software 6.0(1), Cisco NX-OS Software 6.0(2), Cisco NX-OS Software 6.0(3), Cisco NX-OS Software 6.0(4), Cisco NX-OS Software 6.0(2)N1(1), Cisco NX-OS Software 6.0(2)N1(2), Cisco NX-OS Software 6.0(2)N1(2a), Cisco NX-OS Software 6.0(2)N1(1a), Cisco NX-OS Software 6.0(2)N2(1), Cisco NX-OS Software 6.0(2)N2(1b), Cisco NX-OS Software 6.0(2)N2(2), Cisco NX-OS Software 6.0(2)N2(3), Cisco NX-OS Software 6.0(2)N2(4), Cisco NX-OS Software 6.0(2)N2(5), Cisco NX-OS Software 6.0(2)N2(5a), Cisco NX-OS Software 6.0(2)N2(6), Cisco NX-OS Software 6.0(2)N2(7), Cisco NX-OS Software 6.1(2)I1(1), Cisco NX-OS Software 7.0(2)I2(2c), Cisco Firepower Extensible Operating System (FXOS) 2.0.1.68, Cisco Firepower Extensible Operating System (FXOS) 2.0.1.201, Cisco Firepower Extensible Operating System (FXOS) 2.0.1.86, Cisco Firepower Extensible Operating System (FXOS) 2.0.1.37, Cisco Firepower Extensible Operating System (FXOS) 2.0.1.135, Cisco Firepower Extensible Operating System (FXOS) 2.0.1.141, Cisco Firepower Extensible Operating System (FXOS) 2.0.1.144, Cisco Firepower Extensible Operating System (FXOS) 2.0.1.148, Cisco Firepower Extensible Operating System (FXOS) 2.0.1.149, Cisco Firepower Extensible Operating System (FXOS) 2.0.1.153, Cisco Firepower Extensible Operating System (FXOS) 2.0.1.159, Cisco Firepower Extensible Operating System (FXOS) 2.0.1.188, Cisco Firepower Extensible Operating System (FXOS) 2.0.1.203, Cisco Firepower Extensible Operating System (FXOS) 2.0.1.204, Cisco Firepower Extensible Operating System (FXOS) 2.1.1.64, Cisco Firepower Extensible Operating System (FXOS) 2.1.1.73, Cisco Firepower Extensible Operating System (FXOS) 2.1.1.77, Cisco Firepower Extensible Operating System (FXOS) 2.1.1.83, Cisco Firepower Extensible Operating System (FXOS) 2.1.1.85, Cisco Firepower Extensible Operating System (FXOS) 2.1.1.86, Cisco Firepower Extensible Operating System (FXOS) 2.1.1.97, Cisco Firepower Extensible Operating System (FXOS) 2.1.1.106, Cisco Firepower Extensible Operating System (FXOS) 2.1.1.107, Cisco Firepower Extensible Operating System (FXOS) 2.1.1.113, Cisco Firepower Extensible Operating System (FXOS) 2.1.1.115, Cisco Firepower Extensible Operating System (FXOS) 2.1.1.116, Cisco Firepower Extensible Operating System (FXOS) 1.1.1.147, Cisco Firepower Extensible Operating System (FXOS) 1.1.1.160, Cisco Firepower Extensible Operating System (FXOS) 1.1.2.51, Cisco Firepower Extensible Operating System (FXOS) 1.1.2.178, Cisco Firepower Extensible Operating System (FXOS) 1.1.3.84, Cisco Firepower Extensible Operating System (FXOS) 1.1.3.86, Cisco Firepower Extensible Operating System (FXOS) 1.1.3.97, Cisco Firepower Extensible Operating System (FXOS) 1.1.4.95, Cisco Firepower Extensible Operating System (FXOS) 1.1.4.117, Cisco Firepower Extensible Operating System (FXOS) 1.1.4.169, Cisco Firepower Extensible Operating System (FXOS) 1.1.4.175, Cisco Firepower Extensible Operating System (FXOS) 1.1.4.178, Cisco Firepower Extensible Operating System (FXOS) 1.1.4.179, Cisco Firepower Extensible Operating System (FXOS) 2.2.1.63, Cisco Firepower Extensible Operating System (FXOS) 2.2.1.66, Cisco Firepower Extensible Operating System (FXOS) 2.2.1.70, Cisco Firepower Extensible Operating System (FXOS) 2.2.2.17, Cisco Firepower Extensible Operating System (FXOS) 2.2.2.19, Cisco Firepower Extensible Operating System (FXOS) 2.2.2.24, Cisco Firepower Extensible Operating System (FXOS) 2.2.2.26, Cisco Firepower Extensible Operating System (FXOS) 2.2.2.28, Cisco Firepower Extensible Operating System (FXOS) 2.2.2.54, Cisco Firepower Extensible Operating System (FXOS) 2.2.2.60, Cisco Firepower Extensible Operating System (FXOS) 2.2.2.71, Cisco Firepower Extensible Operating System (FXOS) 2.2.2.83, Cisco Firepower Extensible Operating System (FXOS) 2.2.2.86, Cisco Firepower Extensible Operating System (FXOS) 2.3.1.99, Cisco Firepower Extensible Operating System (FXOS) 2.3.1.93, Cisco Firepower Extensible Operating System (FXOS) 2.3.1.91, Cisco Firepower Extensible Operating System (FXOS) 2.3.1.88, Cisco Firepower Extensible Operating System (FXOS) 2.3.1.75, Cisco Firepower Extensible Operating System (FXOS) 2.3.1.73, Cisco Firepower Extensible Operating System (FXOS) 2.3.1.66, Cisco Firepower Extensible Operating System (FXOS) 2.3.1.58, Cisco Firepower Extensible Operating System (FXOS) 2.3.1.130, Cisco Firepower Extensible Operating System (FXOS) 2.3.1.111, Cisco Firepower Extensible Operating System (FXOS) 2.3.1.110, Cisco Firepower Extensible Operating System (FXOS) 2.4.1.101, Cisco NX-OS System Software in ACI Mode 11.0(1b), Cisco NX-OS System Software in ACI Mode 11.0(1c), Cisco NX-OS System Software in ACI Mode 11.0(1d), Cisco NX-OS System Software in ACI Mode 11.0(1e), Cisco NX-OS System Software in ACI Mode 11.0(2j), Cisco NX-OS System Software in ACI Mode 11.0(2m), Cisco NX-OS System Software in ACI Mode 11.0(3f), Cisco NX-OS System Software in ACI Mode 11.0(3i), Cisco NX-OS System Software in ACI Mode 11.0(3k), Cisco NX-OS System Software in ACI Mode 11.0(3n), Cisco NX-OS System Software in ACI Mode 11.0(3o), Cisco NX-OS System Software in ACI Mode 11.0(4h), Cisco NX-OS System Software in ACI Mode 11.0(4o), Cisco NX-OS System Software in ACI Mode 11.0(4q), Cisco NX-OS System Software in ACI Mode 11.1(1j), Cisco NX-OS System Software in ACI Mode 11.1(1o), Cisco NX-OS System Software in ACI Mode 11.1(1r), Cisco NX-OS System Software in ACI Mode 11.1(1s), Cisco NX-OS System Software in ACI Mode 11.1(2h), Cisco NX-OS System Software in ACI Mode 11.1(2i), Cisco NX-OS System Software in ACI Mode 11.1(3f), Cisco NX-OS System Software in ACI Mode 11.1(4e), Cisco NX-OS System Software in ACI Mode 11.1(4f), Cisco NX-OS System Software in ACI Mode 11.1(4g), Cisco NX-OS System Software in ACI Mode 11.1(4i), Cisco NX-OS System Software in ACI Mode 11.1(4l), Cisco NX-OS System Software in ACI Mode 11.1(4m), Cisco NX-OS System Software in ACI Mode 11.2(1i), Cisco NX-OS System Software in ACI Mode 11.2(2g), Cisco NX-OS System Software in ACI Mode 11.2(3c), Cisco NX-OS System Software in ACI Mode 11.2(2h), Cisco NX-OS System Software in ACI Mode 11.2(2i), Cisco NX-OS System Software in ACI Mode 11.2(3e), Cisco NX-OS System Software in ACI Mode 11.2(3h), Cisco NX-OS System Software in ACI Mode 11.2(3m), Cisco NX-OS System Software in ACI Mode 11.2(1k), Cisco NX-OS System Software in ACI Mode 11.2(1m), Cisco NX-OS System Software in ACI Mode 11.2(2j), Cisco NX-OS System Software in ACI Mode 12.0(1m), Cisco NX-OS System Software in ACI Mode 12.0(2g), Cisco NX-OS System Software in ACI Mode 12.0(1n), Cisco NX-OS System Software in ACI Mode 12.0(1o), Cisco NX-OS System Software in ACI Mode 12.0(1p), Cisco NX-OS System Software in ACI Mode 12.0(1q), Cisco NX-OS System Software in ACI Mode 12.0(2h), Cisco NX-OS System Software in ACI Mode 12.0(2l), Cisco NX-OS System Software in ACI Mode 12.0(2m), Cisco NX-OS System Software in ACI Mode 12.0(2n), Cisco NX-OS System Software in ACI Mode 12.0(2o), Cisco NX-OS System Software in ACI Mode 12.0(2f), Cisco NX-OS System Software in ACI Mode 12.0(1r), Cisco NX-OS System Software in ACI Mode 12.1(1h), Cisco NX-OS System Software in ACI Mode 12.1(2e), Cisco NX-OS System Software in ACI Mode 12.1(3g), Cisco NX-OS System Software in ACI Mode 12.1(4a), Cisco NX-OS System Software in ACI Mode 12.1(1i), Cisco NX-OS System Software in ACI Mode 12.1(2g), Cisco NX-OS System Software in ACI Mode 12.1(2k), Cisco NX-OS System Software in ACI Mode 12.1(3h), Cisco NX-OS System Software in ACI Mode 12.1(3j), Cisco NX-OS System Software in ACI Mode 12.2(1n), Cisco NX-OS System Software in ACI Mode 12.2(2e), Cisco NX-OS System Software in ACI Mode 12.2(3j), Cisco NX-OS System Software in ACI Mode 12.2(4f), Cisco NX-OS System Software in ACI Mode 12.2(4p), Cisco NX-OS System Software in ACI Mode 12.2(3p), Cisco NX-OS System Software in ACI Mode 12.2(3r), Cisco NX-OS System Software in ACI Mode 12.2(3s), Cisco NX-OS System Software in ACI Mode 12.2(3t), Cisco NX-OS System Software in ACI Mode 12.2(2f), Cisco NX-OS System Software in ACI Mode 12.2(2g), Cisco NX-OS System Software in ACI Mode 12.2(2i), Cisco NX-OS System Software in ACI Mode 12.2(2j), Cisco NX-OS System Software in ACI Mode 12.2(2k), Cisco NX-OS System Software in ACI Mode 12.2(2q), Cisco NX-OS System Software in ACI Mode 12.2(1o), Cisco NX-OS System Software in ACI Mode 12.2(4q), Cisco NX-OS System Software in ACI Mode 12.2(4r), Cisco NX-OS System Software in ACI Mode 12.3(1e), Cisco NX-OS System Software in ACI Mode 12.3(1f), Cisco NX-OS System Software in ACI Mode 12.3(1i), Cisco NX-OS System Software in ACI Mode 12.3(1l), Cisco NX-OS System Software in ACI Mode 12.3(1o), Cisco NX-OS System Software in ACI Mode 12.3(1p), Cisco NX-OS System Software in ACI Mode 13.0(1k), Cisco NX-OS System Software in ACI Mode 13.0(2h), Cisco NX-OS System Software in ACI Mode 13.0(2k), Cisco NX-OS System Software in ACI Mode 13.0(2n), Cisco NX-OS System Software in ACI Mode 13.1(1i), Cisco NX-OS System Software in ACI Mode 13.1(2m), Cisco NX-OS System Software in ACI Mode 13.1(2o), Cisco NX-OS System Software in ACI Mode 13.1(2p), Cisco NX-OS System Software in ACI Mode 13.1(2q), Cisco NX-OS System Software in ACI Mode 13.1(2s), Cisco NX-OS System Software in ACI Mode 13.1(2t), Cisco NX-OS System Software in ACI Mode 13.2(1l), Cisco NX-OS System Software in ACI Mode 13.2(1m), Cisco NX-OS System Software in ACI Mode 13.2(2l), Cisco NX-OS System Software in ACI Mode 13.2(2o), Cisco NX-OS System Software in ACI Mode 13.2(3i), Cisco NX-OS System Software in ACI Mode 13.2(3n), Cisco NX-OS System Software in ACI Mode 13.2(3o), Cisco NX-OS System Software in ACI Mode 13.2(3r), Cisco NX-OS System Software in ACI Mode 13.2(4d), Cisco NX-OS System Software in ACI Mode 13.2(4e), Cisco NX-OS System Software in ACI Mode 11.3(1g), Cisco NX-OS System Software in ACI Mode 11.3(2f), Cisco NX-OS System Software in ACI Mode 11.3(1h), Cisco NX-OS System Software in ACI Mode 11.3(1i), Cisco NX-OS System Software in ACI Mode 11.3(2h), Cisco NX-OS System Software in ACI Mode 11.3(2i), Cisco NX-OS System Software in ACI Mode 11.3(2k), Cisco NX-OS System Software in ACI Mode 11.3(1j), Cisco NX-OS System Software in ACI Mode 11.3(2j), Cisco NX-OS System Software in ACI Mode 14.0(1h), Cisco Firepower Extensible Operating System (FXOS), Cisco NX-OS Software, Cisco NX-OS System Software in ACI Mode

Related Products

Product CVE Evidence
Firepower Extensible Operating System CVE-2019-1858 Cisco OpenVuln
Cisco NX-OS System Software in ACI Mode CVE-2019-1858 Cisco OpenVuln
Cisco NX-OS Software CVE-2019-1858 Cisco OpenVuln
Cisco Firepower Extensible Operating System (FXOS) CVE-2019-1858 Cisco OpenVuln
Cisco Firepower Extensible Operating System CVE-2019-1858 Cisco OpenVuln