CVE-2019-1737

A vulnerability in the processing of IP Service Level Agreement (SLA) packets by Cisco IOS Software and Cisco IOS XE software could allow an unauthenticated, remote attacker to cause an interface wedge and an eventual denial of service (DoS) condition on the affected device. The vulnerability is due to improper socket resources handling in the IP SLA responder application code. An attacker could exploit this vulnerability by sending crafted IP SLA packets to an affected device. An exploit could allow the attacker to cause an interface to become wedged, resulting in an eventual denial of service (DoS) condition on the affected device.

• CWE-400
• CWE-770

• http://www.securityfocus.com/bid/107604Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190327-ipsla-dosPatch, Vendor Advisory
• http://www.securityfocus.com/bid/107604Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190327-ipsla-dosPatch, Vendor Advisory

Published

Mar 27, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-17364The processCommandUploadLog() function of libcommon.so in Pe…9.8
• CVE-2019-17365Nix through 2.3 allows local users to gain access to an arbi…7.8
• CVE-2019-17366Citrix Application Delivery Management (ADM) 12.1 before bui…8.8
• CVE-2019-17367OpenWRT firmware version 18.06.4 is vulnerable to CSRF via w…8.8
• CVE-2019-17368S-CMS v1.5 has XSS in tpl.php via the member/member_login.ph…6.1
• CVE-2019-17369OTCMS v3.85 has CSRF in the admin/member_deal.php Admin Pane…6.5
• CVE-2019-17370OTCMS v3.85 allows arbitrary PHP Code Execution because admi…7.2
• CVE-2019-17371gif2png 2.5.13 has a memory leak in the writefile function.6.5
• CVE-2019-17372Certain NETGEAR devices allow remote attackers to disable al…8.1
• CVE-2019-17373Certain NETGEAR devices allow unauthenticated access to crit…9.8
• CVE-2019-17375cPanel before 82.0.15 allows API token credentials to persis…8.8
• CVE-2019-17376cPanel before 82.0.15 allows self XSS in the SSL Certificate…6.1