16.8.1

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

cisco

nessus

NVD

Published: 2019-09-25

Updated: 2024-11-21

Summary

A vulnerability in the filesystem resource management code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to exhaust filesystem resources on an affected device and cause a denial of service (DoS) condition. The vulnerability is due to ineffective management of the underlying filesystem resources. An attacker could exploit this vulnerability by performing specific actions that result in messages being sent to specific operating system log files. A successful exploit could allow the attacker to exhaust available filesystem space on an affected device. This could cause the device to crash and reload, resulting in a DoS condition for clients whose network traffic is transiting the device. Upon reload of the device, the impacted filesystem space is cleared, and the device will return to normal operation. However, continued exploitation of this vulnerability could cause subsequent forced crashes and reloads, which could lead to an extended DoS condition.

Vulnerable Configurations

Part	Description	Count
OS	Cisco Cisco IOS XE 16.6.1 Cisco IOS XE 16.8.1	2
Hardware	Cisco Cisco 1100 Integrated Services R - Cisco 4221 Integrated Services R - Cisco 4321 Integrated Services R - Cisco 4331 Integrated Services R - Cisco 4351 Integrated Services R - Cisco 4431 Integrated Services R - Cisco 4451 X Integrated Services R - Cisco ASR 1000 - Cisco ASR 1001 HX R - Cisco ASR 1001 X R - Cisco ASR 1002 HX R - Cisco ASR 1002 X R - Cisco ASR 900 - Cisco ASR 900 - Cisco ASR 920 10Sz PD R - Cisco ASR 920 12Cz A R - Cisco ASR 920 12Cz D R - Cisco ASR 920 12Sz IM R - Cisco ASR 920 24Sz IM R - Cisco ASR 920 24Sz M R - Cisco ASR 920 24Tz M R - Cisco ASR 920 4SZ A R - Cisco ASR 920 4SZ D R - Cisco Catalyst 3650 12X48Uq E - Cisco Catalyst 3650 12X48Uq L - Cisco Catalyst 3650 12X48Uq S - Cisco Catalyst 3650 12X48Ur E - Cisco Catalyst 3650 12X48Ur L - Cisco Catalyst 3650 12X48Ur S - Cisco Catalyst 3650 12X48Uz E - Cisco Catalyst 3650 24Pd E - Cisco Catalyst 3650 24Pd L - Cisco Catalyst 3650 24Pd S - Cisco Catalyst 3650 24Pdm E - Cisco Catalyst 3650 24Pdm L - Cisco Catalyst 3650 24Pdm S - Cisco Catalyst 3650 24Ps E - Cisco Catalyst 3650 24Ps L - Cisco Catalyst 3650 24Ps S - Cisco Catalyst 3650 24Td E - Cisco Catalyst 3650 24Td L - Cisco Catalyst 3650 24Td S - Cisco Catalyst 3650 24Ts E - Cisco Catalyst 3650 24Ts L - Cisco Catalyst 3650 24Ts S - Cisco Catalyst 3650 48Fd E - Cisco Catalyst 3650 48Fd L - Cisco Catalyst 3650 48Fd S - Cisco Catalyst 3650 48Fq E - Cisco Catalyst 3650 48Fq L - Cisco Catalyst 3650 48Fq S - Cisco Catalyst 3650 48Fqm E - Cisco Catalyst 3650 48Fqm L - Cisco Catalyst 3650 48Fqm S - Cisco Catalyst 3650 48Fs E - Cisco Catalyst 3650 48Fs L - Cisco Catalyst 3650 48Fs S - Cisco Catalyst 3650 48Pd E - Cisco Catalyst 3650 48Pd L - Cisco Catalyst 3650 48Pd S - Cisco Catalyst 3650 48Pq E - Cisco Catalyst 3650 48Pq L - Cisco Catalyst 3650 48Pq S - Cisco Catalyst 3650 48Ps E - Cisco Catalyst 3650 48Ps L - Cisco Catalyst 3650 48Ps S - Cisco Catalyst 3650 48Td E - Cisco Catalyst 3650 48Td L - Cisco Catalyst 3650 48Td S - Cisco Catalyst 3650 48Tq E - Cisco Catalyst 3650 48Tq L - Cisco Catalyst 3650 48Tq S - Cisco Catalyst 3650 48Ts E - Cisco Catalyst 3650 48Ts L - Cisco Catalyst 3650 48Ts S - Cisco Catalyst 3650 8X24Uq E - Cisco Catalyst 3650 8X24Uq L - Cisco Catalyst 3650 8X24Uq S - Cisco Catalyst 3850 12S E - Cisco Catalyst 3850 12S S - Cisco Catalyst 3850 12Xs E - Cisco Catalyst 3850 12Xs S - Cisco Catalyst 3850 16Xs E - Cisco Catalyst 3850 16Xs S - Cisco Catalyst 3850 24P E - Cisco Catalyst 3850 24P L - Cisco Catalyst 3850 24P S - Cisco Catalyst 3850 24S E - Cisco Catalyst 3850 24S S - Cisco Catalyst 3850 24T E - Cisco Catalyst 3850 24T L - Cisco Catalyst 3850 24T S - Cisco Catalyst 3850 24U E - Cisco Catalyst 3850 24U L - Cisco Catalyst 3850 24U S - Cisco Catalyst 3850 24Xs E - Cisco Catalyst 3850 24Xs S - Cisco Catalyst 3850 24Xu E - Cisco Catalyst 3850 24Xu L - Cisco Catalyst 3850 24Xu S - Cisco Catalyst 3850 32Xs E - Cisco Catalyst 3850 32Xs S - Cisco Catalyst 3850 48F E - Cisco Catalyst 3850 48F L - Cisco Catalyst 3850 48F S - Cisco Catalyst 3850 48P E - Cisco Catalyst 3850 48P L - Cisco Catalyst 3850 48P S - Cisco Catalyst 3850 48T E - Cisco Catalyst 3850 48T L - Cisco Catalyst 3850 48T S - Cisco Catalyst 3850 48U E - Cisco Catalyst 3850 48U L - Cisco Catalyst 3850 48U S - Cisco Catalyst 3850 48Xs E - Cisco Catalyst 3850 48Xs F E - Cisco Catalyst 3850 48Xs F S - Cisco Catalyst 3850 48Xs S - Cisco Catalyst 9300 - Cisco Catalyst 9300 24P A - Cisco Catalyst 9300 24P E - Cisco Catalyst 9300 24T A - Cisco Catalyst 9300 24T E - Cisco Catalyst 9300 24U A - Cisco Catalyst 9300 24U E - Cisco Catalyst 9300 48P A - Cisco Catalyst 9300 48P E - Cisco Catalyst 9300 48T A - Cisco Catalyst 9300 48T E - Cisco Catalyst 9300 48U A - Cisco Catalyst 9300 48U E - Cisco Catalyst 9400 Supervisor Engine 1 - Cisco Catalyst 9407R - Cisco Catalyst 9410R - Cisco Catalyst 9500 - Cisco Catalyst C3850 12X48U E - Cisco Catalyst C3850 12X48U L - Cisco Catalyst C3850 12X48U S - Cisco Catalyst C9500 12Q A - Cisco Catalyst C9500 12Q E - Cisco Catalyst C9500 24Q A - Cisco Catalyst C9500 24Q E - Cisco Catalyst C9500 40X A - Cisco Catalyst C9500 40X E - Cisco Cloud Services R 1000V - Cisco NCS 4201 - Cisco NCS 4202 - Cisco NCS 4206 - Cisco NCS 4216 - Cisco Network Convergence System 520 -	150

Nessus

NASL family	CISCO
NASL id	CISCO-SA-20190925-IOSXE-FSDOS.NASL
description	A vulnerability in the filesystem resource management code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to exhaust filesystem resources on an affected device and cause a denial of service (DoS) condition. The vulnerability is due to ineffective management of the underlying filesystem resources. An attacker could exploit this vulnerability by performing specific actions that result in messages being sent to specific operating system log files. A successful exploit could allow the attacker to exhaust available filesystem space on an affected device. This could cause the device to crash and reload, resulting in a DoS condition for clients whose network traffic is transiting the device. Upon reload of the device, the impacted filesystem space is cleared, and the device will return to normal operation. However, continued exploitation of this vulnerability could cause subsequent forced crashes and reloads, which could lead to an extended DoS condition. Please see the included Cisco BIDs and Cisco Security Advisory for more information
last seen	2020-06-01
modified	2020-06-02
plugin id	129816
published	2019-10-11
reporter	This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/129816
title	Cisco IOS XE Software Filesystem Exhaustion Denial of Service Vulnerability
code	#TRUSTED 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 # # (C) Tenable Network Security, Inc. # include("compat.inc"); if (description) { script_id(129816); script_version("1.5"); script_cvs_date("Date: 2019/12/20"); script_cve_id("CVE-2019-12658"); script_xref(name:"CISCO-BUG-ID", value:"CSCvf80363"); script_xref(name:"CISCO-SA", value:"cisco-sa-20190925-iosxe-fsdos"); script_name(english:"Cisco IOS XE Software Filesystem Exhaustion Denial of Service Vulnerability"); script_summary(english:"Checks the IOS XE version."); script_set_attribute(attribute:"synopsis", value: "The remote device is missing a vendor-supplied security patch"); script_set_attribute(attribute:"description", value: "A vulnerability in the filesystem resource management code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to exhaust filesystem resources on an affected device and cause a denial of service (DoS) condition. The vulnerability is due to ineffective management of the underlying filesystem resources. An attacker could exploit this vulnerability by performing specific actions that result in messages being sent to specific operating system log files. A successful exploit could allow the attacker to exhaust available filesystem space on an affected device. This could cause the device to crash and reload, resulting in a DoS condition for clients whose network traffic is transiting the device. Upon reload of the device, the impacted filesystem space is cleared, and the device will return to normal operation. However, continued exploitation of this vulnerability could cause subsequent forced crashes and reloads, which could lead to an extended DoS condition. Please see the included Cisco BIDs and Cisco Security Advisory for more information"); # https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190925-iosxe-fsdos script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?d7c8aa37"); script_set_attribute(attribute:"see_also", value:"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvf80363"); script_set_attribute(attribute:"solution", value: "Upgrade to the relevant fixed version referenced in Cisco bug ID CSCvf80363"); script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C"); script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C"); script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"); script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C"); script_set_attribute(attribute:"cvss_score_source", value:"CVE-2019-12658"); script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available"); script_cwe_id(400); script_set_attribute(attribute:"vuln_publication_date", value:"2019/09/25"); script_set_attribute(attribute:"patch_publication_date", value:"2019/09/25"); script_set_attribute(attribute:"plugin_publication_date", value:"2019/10/11"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"cpe:/o:cisco:ios_xe"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_family(english:"CISCO"); script_copyright(english:"This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof."); script_dependencies("cisco_ios_xe_version.nasl"); script_require_keys("Host/Cisco/IOS-XE/Version"); exit(0); } include('audit.inc'); include('cisco_workarounds.inc'); include('ccf.inc'); product_info = cisco::get_product_info(name:'Cisco IOS XE Software'); version_list=make_list( '17.6.1', '17.5.1', '17.4.1', '17.3.1', '17.2.1', '16.8.3', '16.8.2', '16.8.1s', '16.8.1e', '16.8.1d', '16.8.1c', '16.8.1b', '16.8.1a', '16.8.1', '16.7.4', '16.7.3', '16.7.2', '16.7.1b', '16.7.1a', '16.7.1', '16.6.3', '16.6.2', '16.6.1', '16.5.3', '16.5.2', '16.5.1b', '16.5.1a', '16.5.1', '16.4.3', '16.4.2', '16.4.1', '16.3.6', '16.3.5b', '16.3.5', '16.3.4', '16.3.3', '16.3.2', '16.3.1a', '16.3.1', '16.2.2', '16.2.1', '16.1.3', '16.1.2', '16.1.1' ); workarounds = make_list(CISCO_WORKAROUNDS['no_workaround']); workaround_params = make_list(); reporting = make_array( 'port' , 0, 'severity' , SECURITY_HOLE, 'version' , product_info['version'], 'bug_id' , 'CSCvf80363' ); cisco::check_and_report(product_info:product_info, workarounds:workarounds, workaround_params:workaround_params, reporting:reporting, vuln_versions:version_list);

Summary

Vulnerable Configurations

Nessus

References