CVE-2019-1738

A vulnerability in the Network-Based Application Recognition (NBAR) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. This vulnerability is due to a parsing issue on DNS packets. An attacker could exploit these vulnerabilities by sending crafted DNS packets through routers that are running an affected version and have NBAR enabled. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition.

• CWE-20
• CWE-20

• http://www.securityfocus.com/bid/107597Broken Link, Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190327-nbarPatch, Vendor Advisory
• http://www.securityfocus.com/bid/107597Broken Link, Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190327-nbarPatch, Vendor Advisory

Published

Mar 28, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-17373Certain NETGEAR devices allow unauthenticated access to crit…9.8
• CVE-2019-17375cPanel before 82.0.15 allows API token credentials to persis…8.8
• CVE-2019-17376cPanel before 82.0.15 allows self XSS in the SSL Certificate…6.1
• CVE-2019-17377cPanel before 82.0.15 allows self XSS in LiveAPI example scr…6.1
• CVE-2019-17378cPanel before 82.0.15 allows self XSS in the SSL Key Delete …6.1
• CVE-2019-17379cPanel before 82.0.15 allows self stored XSS in the WHM SSL …6.1
• CVE-2019-17380cPanel before 82.0.15 allows self XSS in the WHM Update Pref…6.1
• CVE-2019-17382An issue was discovered in zabbix.php?action=dashboard.view&…9.1
• CVE-2019-17383The netaddr gem before 2.0.4 for Ruby has misconfigured file…9.8
• CVE-2019-17384The animate-it plugin before 2.3.4 for WordPress has XSS.6.1
• CVE-2019-17385The animate-it plugin before 2.3.5 for WordPress has XSS.6.1
• CVE-2019-17386The animate-it plugin before 2.3.6 for WordPress has CSRF in…8.8