CVE-2019-1905

A vulnerability in the GZIP decompression engine of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass configured content filters on the device. The vulnerability is due to improper validation of GZIP-formatted files. An attacker could exploit this vulnerability by sending a malicious file inside a crafted GZIP-compressed file. A successful exploit could allow the attacker to bypass configured content filters that would normally drop the email.

• CWE-20
• CWE-20

• http://www.securityfocus.com/bid/108856Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190619-esa-bypassVendor Advisory
• http://www.securityfocus.com/bid/108856Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190619-esa-bypassVendor Advisory

Published

Jun 20, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-19044Two memory leaks in the v3d_submit_cl_ioctl() function in dr…7.5
• CVE-2019-19045A memory leak in the mlx5_fpga_conn_create_cq() function in …4.4
• CVE-2019-19046A memory leak in the __ipmi_bmc_register() function in drive…6.5
• CVE-2019-19047A memory leak in the mlx5_fw_fatal_reporter_dump() function …5.5
• CVE-2019-19048A memory leak in the crypto_reportstat() function in drivers…7.5
• CVE-2019-19049A memory leak in the unittest_data_add() function in drivers…7.5
• CVE-2019-19050A memory leak in the crypto_reportstat() function in crypto/…7.5
• CVE-2019-19051A memory leak in the i2400m_op_rfkill_sw_toggle() function i…5.5
• CVE-2019-19052A memory leak in the gs_can_open() function in drivers/net/c…7.5
• CVE-2019-19053A memory leak in the rpmsg_eptdev_write_iter() function in d…7.5
• CVE-2019-19054A memory leak in the cx23888_ir_probe() function in drivers/…4.7
• CVE-2019-19055A memory leak in the nl80211_get_ftm_responder_stats() funct…5.5