CVE-2019-1708

A vulnerability in the Internet Key Exchange Version 2 Mobility and Multihoming Protocol (MOBIKE) feature for the Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a memory leak or a reload of an affected device that leads to a denial of service (DoS) condition. The vulnerability is due to the incorrect processing of certain MOBIKE packets. An attacker could exploit this vulnerability by sending crafted MOBIKE packets to an affected device to be processed. A successful exploit could cause an affected device to continuously consume memory and eventually reload, resulting in a DoS condition. The MOBIKE feature is supported only for IPv4 addresses.

• CWE-404
• CWE-401

• http://www.securityfocus.com/bid/108166Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-asa-ftd-ike-dosVendor Advisory
• http://www.securityfocus.com/bid/108166Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-asa-ftd-ike-dosVendor Advisory

Published

May 3, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-17071The client-dash (aka Client Dash) plugin 2.1.4 for WordPress…6.1
• CVE-2019-17072The new-contact-form-widget (aka Contact Form Widget - Conta…9.8
• CVE-2019-17073emlog through 6.0.0beta allows remote authenticated users to…6.5
• CVE-2019-17074An issue was discovered in XunRuiCMS 4.3.1. There is a store…5.4
• CVE-2019-17075An issue was discovered in write_tpt_entry in drivers/infini…7.5
• CVE-2019-17076An issue was discovered in Jamf Pro 9.x and 10.x before 10.1…9.8
• CVE-2019-17080mintinstall (aka Software Manager) 7.9.9 for Linux Mint allo…7.8
• CVE-2019-17082Insufficiently Protected Credentials vulnerability in OpenTe…9
• CVE-2019-17085XXE attack vulnerability on Micro Focus Operations Agent, af…6.5
• CVE-2019-17087Unauthorized file download vulnerability in all supported ve…7.5
• CVE-2019-1709A vulnerability in the CLI of Cisco Firepower Threat Defense…7.8
• CVE-2019-17091faces/context/PartialViewContextImpl.java in Eclipse Mojarra…6.1