CVE-2019-15989

A vulnerability in the implementation of the Border Gateway Protocol (BGP) functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to incorrect processing of a BGP update message that contains a specific BGP attribute. An attacker could exploit this vulnerability by sending BGP update messages that include a specific, malformed attribute to be processed by an affected system. A successful exploit could allow the attacker to cause the BGP process to restart unexpectedly, resulting in a DoS condition. The Cisco implementation of BGP accepts incoming BGP traffic only from explicitly defined peers. To exploit this vulnerability, the malicious BGP update message would need to come from a configured, valid BGP peer or would need to be injected by the attacker into the victim’s BGP network on an existing, valid TCP connection to a BGP peer.

• CWE-754
• CWE-754

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200122-ios-xr-bgp-dosVendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200122-ios-xr-bgp-dosVendor Advisory

Published

Jan 26, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-15983A vulnerability in the SOAP API of Cisco Data Center Network…4.9
• CVE-2019-15984Multiple vulnerabilities in the REST and SOAP API endpoints …7.2
• CVE-2019-15985Multiple vulnerabilities in the REST and SOAP API endpoints …7.2
• CVE-2019-15986A vulnerability in the CLI of Cisco Unity Express could allo…6.7
• CVE-2019-15987A vulnerability in web interface of the Cisco Webex Event Ce…5.3
• CVE-2019-15988A vulnerability in the antispam protection mechanisms of Cis…5.3
• CVE-2019-1599A vulnerability in the network stack of Cisco NX-OS Software…8.6
• CVE-2019-15990A vulnerability in the web-based management interface of cer…5.3
• CVE-2019-15992A vulnerability in the implementation of the Lua interpreter…7.2
• CVE-2019-15993A vulnerability in the web UI of Cisco Small Business Switch…5.3
• CVE-2019-15994A vulnerability in the web-based management interface of Cis…6.1
• CVE-2019-15995A vulnerability in the web UI of Cisco DNA Spaces: Connector…6.5