CVE-2019-1846

A vulnerability in the Multiprotocol Label Switching (MPLS) Operations, Administration, and Maintenance (OAM) implementation of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers could allow an unauthenticated, adjacent attacker to trigger a denial of service (DoS) condition on an affected device. The vulnerability is due to the incorrect handling of certain MPLS OAM packets. An attacker could exploit this vulnerability by sending malicious MPLS OAM packets to an affected device. A successful exploit could allow the attacker to cause the lspv_server process to crash. The crash could lead to system instability and the inability to process or forward traffic though the device, resulting in a DoS condition that require manual intervention to restore normal operating conditions.

• CWE-20
• CWE-20

• http://www.securityfocus.com/bid/108363Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190515-asr9k-mpls-dosVendor Advisory
• http://www.securityfocus.com/bid/108363Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190515-asr9k-mpls-dosVendor Advisory

Published

May 16, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-18454An issue was discovered in GitLab Community and Enterprise E…6.1
• CVE-2019-18455An issue was discovered in GitLab Community and Enterprise E…7.5
• CVE-2019-18456An issue was discovered in GitLab Community and Enterprise E…5.3
• CVE-2019-18457An issue was discovered in GitLab Community and Enterprise E…8.8
• CVE-2019-18458An issue was discovered in GitLab Community and Enterprise E…2.7
• CVE-2019-18459An issue was discovered in GitLab Community and Enterprise E…5.3
• CVE-2019-18460An issue was discovered in GitLab Community and Enterprise E…7.5
• CVE-2019-18461An issue was discovered in GitLab Community and Enterprise E…4.3
• CVE-2019-18462An issue was discovered in GitLab Community and Enterprise E…4.3
• CVE-2019-18463An issue was discovered in GitLab Community and Enterprise E…4.3
• CVE-2019-18464In Progress MOVEit Transfer 10.2 before 10.2.6 (2018.3), 11.…9.8
• CVE-2019-18465In Progress MOVEit Transfer 11.1 before 11.1.3, a vulnerabil…9.8