Vulnerabilities > CVE-2019-12658 - Unspecified vulnerability in Cisco IOS XE 16.6.1/16.8.1

#TRUSTED 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
#
# (C) Tenable Network Security, Inc.
#

include("compat.inc");

if (description)
{
  script_id(129816);
  script_version("1.5");
  script_cvs_date("Date: 2019/12/20");

  script_cve_id("CVE-2019-12658");
  script_xref(name:"CISCO-BUG-ID", value:"CSCvf80363");
  script_xref(name:"CISCO-SA", value:"cisco-sa-20190925-iosxe-fsdos");

  script_name(english:"Cisco IOS XE Software Filesystem Exhaustion Denial of Service Vulnerability");
  script_summary(english:"Checks the IOS XE version.");

  script_set_attribute(attribute:"synopsis", value:
"The remote device is missing a vendor-supplied security patch");
  script_set_attribute(attribute:"description", value:
"A vulnerability in the filesystem resource management code of Cisco IOS XE Software could allow an unauthenticated,
remote attacker to exhaust filesystem resources on an affected device and cause a denial of service (DoS) condition.
The vulnerability is due to ineffective management of the underlying filesystem resources. An attacker could exploit
this vulnerability by performing specific actions that result in messages being sent to specific operating system
log files. A successful exploit could allow the attacker to exhaust available filesystem space on an affected device.
This could cause the device to crash and reload, resulting in a DoS condition for clients whose network traffic is
transiting the device. Upon reload of the device, the impacted filesystem space is cleared, and the device will return
to normal operation. However, continued exploitation of this vulnerability could cause subsequent forced crashes and
reloads, which could lead to an extended DoS condition.
Please see the included Cisco BIDs and Cisco Security Advisory for more information");
  # https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190925-iosxe-fsdos
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?d7c8aa37");
  script_set_attribute(attribute:"see_also", value:"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvf80363");
  script_set_attribute(attribute:"solution", value:
"Upgrade to the relevant fixed version referenced in Cisco bug ID CSCvf80363");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2019-12658");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_cwe_id(400);

  script_set_attribute(attribute:"vuln_publication_date", value:"2019/09/25");
  script_set_attribute(attribute:"patch_publication_date", value:"2019/09/25");
  script_set_attribute(attribute:"plugin_publication_date", value:"2019/10/11");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:cisco:ios_xe");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"CISCO");

  script_copyright(english:"This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("cisco_ios_xe_version.nasl");
  script_require_keys("Host/Cisco/IOS-XE/Version");

  exit(0);
}

include('audit.inc');
include('cisco_workarounds.inc');
include('ccf.inc');

product_info = cisco::get_product_info(name:'Cisco IOS XE Software');

version_list=make_list(
  '17.6.1',
  '17.5.1',
  '17.4.1',
  '17.3.1',
  '17.2.1',
  '16.8.3',
  '16.8.2',
  '16.8.1s',
  '16.8.1e',
  '16.8.1d',
  '16.8.1c',
  '16.8.1b',
  '16.8.1a',
  '16.8.1',
  '16.7.4',
  '16.7.3',
  '16.7.2',
  '16.7.1b',
  '16.7.1a',
  '16.7.1',
  '16.6.3',
  '16.6.2',
  '16.6.1',
  '16.5.3',
  '16.5.2',
  '16.5.1b',
  '16.5.1a',
  '16.5.1',
  '16.4.3',
  '16.4.2',
  '16.4.1',
  '16.3.6',
  '16.3.5b',
  '16.3.5',
  '16.3.4',
  '16.3.3',
  '16.3.2',
  '16.3.1a',
  '16.3.1',
  '16.2.2',
  '16.2.1',
  '16.1.3',
  '16.1.2',
  '16.1.1'
);

workarounds = make_list(CISCO_WORKAROUNDS['no_workaround']);
workaround_params = make_list();


reporting = make_array(
'port'     , 0,
'severity' , SECURITY_HOLE,
'version'  , product_info['version'],
'bug_id'   , 'CSCvf80363'
);

cisco::check_and_report(product_info:product_info, workarounds:workarounds, workaround_params:workaround_params, reporting:reporting, vuln_versions:version_list);