CVE-2019-1739

A vulnerability in the Network-Based Application Recognition (NBAR) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. This vulnerability is due to a parsing issue on DNS packets. An attacker could exploit this vulnerability by sending crafted DNS packets through routers that are running an affected version and have NBAR enabled. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition.

• CWE-20
• CWE-20

• http://www.securityfocus.com/bid/107597Broken Link, Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190327-nbarPatch, Vendor Advisory
• http://www.securityfocus.com/bid/107597Broken Link, Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190327-nbarPatch, Vendor Advisory

Published

Mar 28, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-17384The animate-it plugin before 2.3.4 for WordPress has XSS.6.1
• CVE-2019-17385The animate-it plugin before 2.3.5 for WordPress has XSS.6.1
• CVE-2019-17386The animate-it plugin before 2.3.6 for WordPress has CSRF in…8.8
• CVE-2019-17387An authentication flaw in the AVPNC_RP service in Aviatrix V…7.8
• CVE-2019-17388Weak file permissions applied to the Aviatrix VPN Client thr…7.8
• CVE-2019-17389In RIOT 2019.07, the MQTT-SN implementation (asymcute) misha…7.5
• CVE-2019-17390An issue was discovered in the Outlook add-in in Pronestor P…7.8
• CVE-2019-17391An issue was discovered in the Espressif ESP32 mask ROM code…4.6
• CVE-2019-17392Progress Sitefinity 12.1 has a Weak Password Recovery Mechan…9.8
• CVE-2019-17393The Customer's Tomedo Server in Version 1.7.3 communicates t…9.8
• CVE-2019-17394In the Seesaw Parent and Family application 6.2.5 for Androi…9.8
• CVE-2019-17395In the Rapid Gator application 0.7.1 for Android, the userna…9.8