CVE-2019-1595

A vulnerability in the Fibre Channel over Ethernet (FCoE) protocol implementation in Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to an incorrect allocation of an internal interface index. An adjacent attacker with the ability to submit a crafted FCoE packet that crosses affected interfaces could trigger this vulnerability. A successful exploit could allow the attacker to cause a packet loop and high throughput on the affected interfaces, resulting in a DoS condition. This vulnerability has been fixed in version 7.3(5)N1(1).

• CWE-913
• CWE-913

• http://www.securityfocus.com/bid/107320Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190306-nexus-fbr-dosPatch, Vendor Advisory
• http://www.securityfocus.com/bid/107320Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190306-nexus-fbr-dosPatch, Vendor Advisory

Published

Mar 6, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-15944In Counter-Strike: Global Offensive before 8/29/2019, commun…5.3
• CVE-2019-15945OpenSC before 0.20.0-rc1 has an out-of-bounds access of an A…6.4
• CVE-2019-15946OpenSC before 0.20.0-rc1 has an out-of-bounds access of an A…6.4
• CVE-2019-15947In Bitcoin Core 0.18.0, bitcoin-qt stores wallet.dat data un…7.5
• CVE-2019-15948Texas Instruments CC256x and WL18xx dual-mode Bluetooth cont…8.8
• CVE-2019-15949Nagios XI before 5.6.6 allows remote command execution as ro…8.8
• CVE-2019-15950The CRM Plugin before 4.2.4 for Redmine allows XSS via craft…6.1
• CVE-2019-15952An issue was discovered in Total.js CMS 12.0.0. An authentic…
• CVE-2019-15953An issue was discovered in Total.js CMS 12.0.0. An authentic…
• CVE-2019-15954An issue was discovered in Total.js CMS 12.0.0. An authentic…9.9
• CVE-2019-15955An issue was discovered in Total.js CMS 12.0.0. A low privil…
• CVE-2019-15956A vulnerability in the web management interface of Cisco Asy…8.8