CVE-2019-1740

A vulnerability in the Network-Based Application Recognition (NBAR) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. This vulnerability are due to a parsing issue on DNS packets. An attacker could exploit this vulnerability by sending crafted DNS packets through routers that are running an affected version and have NBAR enabled. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition.

• CWE-20
• CWE-20

• http://www.securityfocus.com/bid/107597Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190327-nbarPatch, Vendor Advisory
• http://www.securityfocus.com/bid/107597Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190327-nbarPatch, Vendor Advisory

Published

Mar 28, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-17394In the Seesaw Parent and Family application 6.2.5 for Androi…9.8
• CVE-2019-17395In the Rapid Gator application 0.7.1 for Android, the userna…9.8
• CVE-2019-17396In the PowerSchool Mobile application 1.1.8 for Android, the…9.8
• CVE-2019-17397In the DoorDash application through 11.5.2 for Android, the …9.8
• CVE-2019-17398In the Dark Horse Comics application 1.3.21 for Android, tok…9.8
• CVE-2019-17399The Shack Forms Pro extension before 4.0.32 for Joomla! allo…9.8
• CVE-2019-17400The unoconv package before 0.9 mishandles untrusted pathname…7.5
• CVE-2019-17401libyal liblnk 20191006 has a heap-based buffer over-read in …3.3
• CVE-2019-17402Exiv2 0.27.2 allows attackers to trigger a crash in Exiv2::g…6.5
• CVE-2019-17403Nokia IMPACT < 18A: An unrestricted File Upload vulnerabilit…8.8
• CVE-2019-17404Nokia IMPACT < 18A: allows full path disclosure4.3
• CVE-2019-17405Nokia IMPACT < 18A: has Reflected self XSS6.1