CVE-2019-1617

A vulnerability in the Fibre Channel over Ethernet (FCoE) N-port Virtualization (NPV) protocol implementation in Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition. The vulnerability is due to an incorrect processing of FCoE packets when the fcoe-npv feature is uninstalled. An attacker could exploit this vulnerability by sending a stream of FCoE frames from an adjacent host to an affected device. An exploit could allow the attacker to cause packet amplification to occur, resulting in the saturation of interfaces and a DoS condition. Nexus 9000 Series Switches in Standalone NX-OS Mode are affected running software versions prior to 7.0(3)I7(5) and 9.2(2).

• CWE-913
• CWE-913

• http://www.securityfocus.com/bid/107336Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190306-nxos-npv-dosExploit, Vendor Advisory
• http://www.securityfocus.com/bid/107336Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190306-nxos-npv-dosExploit, Vendor Advisory

Published

Mar 11, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-16163Oniguruma before 6.9.3 allows Stack Exhaustion in regcomp.c …7.5
• CVE-2019-16164MyHTML through 4.0.5 has a NULL pointer dereference in myhtm…6.5
• CVE-2019-16165GNU cflow through 1.6 has a use-after-free in the reference …6.5
• CVE-2019-16166GNU cflow through 1.6 has a heap-based buffer over-read in t…6.5
• CVE-2019-16167sysstat before 12.1.6 has memory corruption due to an Intege…5.5
• CVE-2019-16168In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.…6.5
• CVE-2019-16170An issue was discovered in GitLab Enterprise Edition 11.x an…7.1
• CVE-2019-16171In JetBrains YouTrack through 2019.2.56594, stored XSS was f…6.1
• CVE-2019-16172LimeSurvey before v3.17.14 allows stored XSS for escalating …5.4
• CVE-2019-16173LimeSurvey before v3.17.14 allows reflected XSS for escalati…5.4
• CVE-2019-16174An XML injection vulnerability was found in Limesurvey befor…8.8
• CVE-2019-16175A clickjacking vulnerability was found in Limesurvey before …4.3