CVE-2019-12658

A vulnerability in the filesystem resource management code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to exhaust filesystem resources on an affected device and cause a denial of service (DoS) condition. The vulnerability is due to ineffective management of the underlying filesystem resources. An attacker could exploit this vulnerability by performing specific actions that result in messages being sent to specific operating system log files. A successful exploit could allow the attacker to exhaust available filesystem space on an affected device. This could cause the device to crash and reload, resulting in a DoS condition for clients whose network traffic is transiting the device. Upon reload of the device, the impacted filesystem space is cleared, and the device will return to normal operation. However, continued exploitation of this vulnerability could cause subsequent forced crashes and reloads, which could lead to an extended DoS condition.

• CWE-400

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190925-iosxe-fsdosVendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190925-iosxe-fsdosVendor Advisory

Published

Sep 25, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-12652A vulnerability in the ingress packet processing function of…7.5
• CVE-2019-12653A vulnerability in the Raw Socket Transport feature of Cisco…7.5
• CVE-2019-12654A vulnerability in the common Session Initiation Protocol (S…7.5
• CVE-2019-12655A vulnerability in the FTP application layer gateway (ALG) f…7.5
• CVE-2019-12656A vulnerability in the IOx application environment of multip…7.5
• CVE-2019-12657A vulnerability in Unified Threat Defense (UTD) in Cisco IOS…7.5
• CVE-2019-12659A vulnerability in the HTTP server code of Cisco IOS XE Soft…7.5
• CVE-2019-1266A spoofing vulnerability exists in Microsoft Exchange Server…6.1
• CVE-2019-12660A vulnerability in the CLI of Cisco IOS XE Software could al…5.5
• CVE-2019-12661A vulnerability in a Virtualization Manager (VMAN) related C…6.7
• CVE-2019-12662A vulnerability in Cisco NX-OS Software and Cisco IOS XE Sof…6.7
• CVE-2019-12663A vulnerability in the Cisco TrustSec (CTS) Protected Access…8.6