CVE-2019-1947

A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to cause the CPU utilization to increase to 100 percent, causing a denial of service (DoS) condition on an affected device. The vulnerability is due to improper handling of email messages that contain large attachments. An attacker could exploit this vulnerability by sending a malicious email message through the targeted device. A successful exploit could allow the attacker to cause a permanent DoS condition due to high CPU utilization. This vulnerability may require manual intervention to recover the ESA.

• CWE-20
• CWE-20

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200219-esa-dosVendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200219-esa-dosVendor Advisory

Published

Sep 23, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-19462relay_open in kernel/relay.c in the Linux kernel through 5.4…5.5
• CVE-2019-19463The Anhui Huami Mi Fit application before 4.0.11 for Android…5.3
• CVE-2019-19464The CBC Gem application before 9.24.1 for Android and before…5.3
• CVE-2019-19466SCEditor 2.1.3 allows XSS.6.1
• CVE-2019-19468Free Photo Viewer 1.3 allows remote attackers to execute arb…7.8
• CVE-2019-19469In Zmanda Management Console 3.3.9, ZMC_Admin_Advanced?form=…8.8
• CVE-2019-19470Unsafe usage of .NET deserialization in Named Pipe message p…7.8
• CVE-2019-19475An issue was discovered in ManageEngine Applications Manager…8.8
• CVE-2019-19479An issue was discovered in OpenSC through 0.19.0 and 0.20.x …5.5
• CVE-2019-1948A vulnerability in Cisco Webex Meetings Mobile (iOS) could a…5.9
• CVE-2019-19480An issue was discovered in OpenSC through 0.19.0 and 0.20.x …4.6
• CVE-2019-19481An issue was discovered in OpenSC through 0.19.0 and 0.20.x …4.6