CVE-2019-1965
Last modified
CVE-2019-1965 is a high-severity vulnerability rated 7.7/10 on the CVSS scale. A vulnerability in the Virtual Shell (VSH) session management for Cisco NX-OS Software could allow an authenticated, remote attacker to cause a VSH process to fail to delete upon termination. This can lead to a build-up of VSH processes that overtime can deplete system memory. EPSS estimates a 1.52% chance of exploitation in the next 30 days.
Description
A vulnerability in the Virtual Shell (VSH) session management for Cisco NX-OS Software could allow an authenticated, remote attacker to cause a VSH process to fail to delete upon termination. This can lead to a build-up of VSH processes that overtime can deplete system memory. When there is no system memory available, this can cause unexpected system behaviors and crashes. The vulnerability is due to the VSH process not being properly deleted when a remote management connection to the device is disconnected. An attacker could exploit this vulnerability by repeatedly performing a remote management connection to the device and terminating the connection in an unexpected manner. A successful exploit could allow the attacker to cause the VSH processes to fail to delete, which can lead to a system-wide denial of service (DoS) condition. The attacker must have valid user credentials to log in to the device using the remote management connection.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Nx-Os | >= 5.2, < 6.2\(29\) |
| Cisco | Nx-Os | >= 7.3, < 8.4 |
| Cisco | Nx-Os | >= 7.0\(3\)f, < 9.2 |
| Cisco | Nx-Os | < 7.1\(5\)n1\(1b\) |
| Cisco | Nx-Os | >= 7.3, < 7.3\(5\)n1\(1\) |
| Cisco | Nx-Os | < 6.2\(22\) |
| Cisco | Nx-Os | >= 7.2, < 7.3\(4\)d1\(1\) |
| Cisco | Nx-Os | >= 8.0, < 8.2\(3\) |
| Cisco | Nx-Os | >= 8.3, < 8.4 |
| Cisco | Nx-Os | < 7.0\(3\)i4\(9\) |
| Cisco | Nx-Os | >= 7.0\(3\)i7, < 7.0\(3\)i7\(4\) |
| Cisco | Nx-Os | >= 7.0\(3\)i7, < 7.0\(3\)i7\(6\) |
| Cisco | Nx-Os | >= 9.2, < 9.2\(3\) |
| Cisco | Nx-Os | < 3.2\(3k\) |
| Cisco | Nx-Os | >= 4.0, < 4.0\(2e\) |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2019-1965?
How severe is CVE-2019-1965?
How do I fix CVE-2019-1965?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2019
- CVE-2019-19643ise smart connect KNX Vaillant 1.2.839 contain a Denial of S…7.5
- CVE-2019-19645alter.c in SQLite through 3.30.1 allows attackers to trigger…5.5
- CVE-2019-19646pragma.c in SQLite through 3.30.1 mishandles NOT NULL in an …9.8
- CVE-2019-19647radare2 through 4.0.0 lacks validation of the content variab…7.8
- CVE-2019-19648In the macho_parse_file functionality in macho/macho.c of YA…7.8
- CVE-2019-19649Zoho ManageEngine Applications Manager before 13620 allows a…9.8
- CVE-2019-19650Zoho ManageEngine Applications Manager before 13640 allows a…8.8
- CVE-2019-19659A CSRF vulnerability exists in the Web File Manager's Edit A…8.8
- CVE-2019-1966A vulnerability in a specific CLI command within the local m…7.8
- CVE-2019-19660A CSRF vulnerability exists in the Web File Manager's Networ…6.5
- CVE-2019-19661A Cookie based reflected XSS exists in the Web File Manager …6.1
- CVE-2019-19662A CSRF vulnerability exists in the Web File Manager's Create…6.5
Are you affected by CVE-2019-1965?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST