CVE-2019-1909

A vulnerability in the implementation of Border Gateway Protocol (BGP) functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected system. The vulnerability is due to incorrect processing of certain BGP update messages. An attacker could exploit this vulnerability by sending BGP update messages that include a specific set of attributes to be processed by an affected system. A successful exploit could allow the attacker to cause the BGP process to restart unexpectedly, resulting in a DoS condition. The Cisco implementation of BGP accepts incoming BGP traffic from explicitly defined peers only. To exploit this vulnerability, the malicious BGP update message would need to come from a configured, valid BGP peer or would need to be injected by the attacker into the victim's BGP network on an existing, valid TCP connection to a BGP peer.

• CWE-20
• CWE-20

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190703-iosxr-bgp-dosVendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190703-iosxr-bgp-dosVendor Advisory

Published

Jul 6, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-19084In Octopus Deploy 3.3.0 through 2019.10.4, an authenticated …4.3
• CVE-2019-19085A persistent cross-site scripting (XSS) vulnerability in Oct…5.4
• CVE-2019-19086Gitlab Enterprise Edition (EE) before 12.5.1 has Insecure Pe…4.3
• CVE-2019-19087Gitlab Enterprise Edition (EE) before 12.5.1 has Insecure Pe…4.3
• CVE-2019-19088Gitlab Enterprise Edition (EE) 11.3 through 12.4.2 allows Di…9.8
• CVE-2019-19089For ABB eSOMS versions 4.0 to 6.0.3, the X-Content-Type-Opti…6.1
• CVE-2019-19090For ABB eSOMS versions 4.0 to 6.0.2, the Secure Flag is not …3.5
• CVE-2019-19091For ABB eSOMS versions 4.0 to 6.0.3, HTTPS responses contain…4.3
• CVE-2019-19092ABB eSOMS versions 4.0 to 6.0.3 use ASP.NET Viewstate withou…3.5
• CVE-2019-19093eSOMS versions 4.0 to 6.0.3 do not enforce password complexi…6.5
• CVE-2019-19094Lack of input checks for SQL queries in ABB eSOMS versions 3…7.6
• CVE-2019-19095Lack of adequate input/output validation for ABB eSOMS versi…5.4