CVE-2019-1965 : A vulnerability in the Virtual Shell (VSH) session management for Cisco NX-OS Software could allow an authenticated, rem

A vulnerability in the Virtual Shell (VSH) session management for Cisco NX-OS Software could allow an authenticated, remote attacker to cause a VSH process to fail to delete upon termination. This can lead to a build-up of VSH processes that overtime can deplete system memory. When there is no system memory available, this can cause unexpected system behaviors and crashes. The vulnerability is due to the VSH process not being properly deleted when a remote management connection to the device is disconnected. An attacker could exploit this vulnerability by repeatedly performing a remote management connection to the device and terminating the connection in an unexpected manner. A successful exploit could allow the attacker to cause the VSH processes to fail to delete, which can lead to a system-wide denial of service (DoS) condition. The attacker must have valid user credentials to log in to the device using the remote management connection.

Published 2019-08-28 19:15:11

Updated 2020-10-16 14:05:02

Source Cisco Systems, Inc.

View at NVD, CVE.org

Vulnerability category: Denial of service

Exploit prediction scoring system (EPSS) score for CVE-2019-1965

EPSS FAQ

0.11%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 43 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2019-1965

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.0	MEDIUM	AV:N/AC:L/Au:S/C:N/I:N/A:P	8.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: Single Confidentiality Impact: None Integrity Impact: None Availability Impact: Partial
7.7	HIGH	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H	3.1	4.0	Cisco Systems, Inc.
Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Changed Confidentiality: None Integrity: None Availability: High
7.7	HIGH	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H	3.1	4.0	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Changed Confidentiality: None Integrity: None Availability: High

CWE ids for CVE-2019-1965

CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

Assigned by: ykramarz@cisco.com (Secondary)

CWE-772 Missing Release of Resource after Effective Lifetime

The product does not release a resource after its effective lifetime has ended, i.e., after the resource is no longer needed.

Assigned by: nvd@nist.gov (Primary)

Products affected by CVE-2019-1965

Cisco » Nx-os
Versions from including (>=) 5.2 and before (<) 6.2\(29\)
cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Mds 9132t » Version: N/A
When used together with: Cisco » Mds 9148s » Version: N/A
When used together with: Cisco » Mds 9148t » Version: N/A
When used together with: Cisco » Mds 9216 » Version: N/A
When used together with: Cisco » Mds 9216a » Version: N/A
When used together with: Cisco » Mds 9216i » Version: N/A
When used together with: Cisco » Mds 9222i » Version: N/A
When used together with: Cisco » Mds 9250i » Version: N/A
When used together with: Cisco » Mds 9396s » Version: N/A
When used together with: Cisco » Mds 9396t » Version: N/A
When used together with: Cisco » Mds 9506 » Version: N/A
When used together with: Cisco » Mds 9509 » Version: N/A
When used together with: Cisco » Mds 9513 » Version: N/A
When used together with: Cisco » Mds 9706 » Version: N/A
When used together with: Cisco » Mds 9710 » Version: N/A
When used together with: Cisco » Mds 9718 » Version: N/A
Cisco » Nx-os
Versions from including (>=) 8.3 and before (<) 8.4
cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » 7000 10-slot » Version: N/A
When used together with: Cisco » 7000 18-slot » Version: N/A
When used together with: Cisco » 7000 4-slot » Version: N/A
When used together with: Cisco » 7000 9-slot » Version: N/A
When used together with: Cisco » 7700 10-slot » Version: N/A
When used together with: Cisco » 7700 18-slot » Version: N/A
When used together with: Cisco » 7700 2-slot » Version: N/A
When used together with: Cisco » 7700 6-slot » Version: N/A
When used together with: Cisco » N77-f312ck-26 » Version: N/A
When used together with: Cisco » N77-f324fq-25 » Version: N/A
When used together with: Cisco » N77-f348xp-23 » Version: N/A
When used together with: Cisco » N77-f430cq-36 » Version: N/A
When used together with: Cisco » N77-m312cq-26l » Version: N/A
When used together with: Cisco » N77-m324fq-25l » Version: N/A
When used together with: Cisco » N77-m348xp-23l » Version: N/A
When used together with: Cisco » N7k-f248xp-25e » Version: N/A
When used together with: Cisco » N7k-f306ck-25 » Version: N/A
When used together with: Cisco » N7k-f312fq-25 » Version: N/A
When used together with: Cisco » N7k-m202cf-22l » Version: N/A
When used together with: Cisco » N7k-m206fq-23l » Version: N/A
When used together with: Cisco » N7k-m224xp-23l » Version: N/A
When used together with: Cisco » N7k-m324fq-25l » Version: N/A
When used together with: Cisco » N7k-m348xp-25l » Version: N/A
When used together with: Cisco » Nexus 7000 Supervisor 1 » Version: N/A
When used together with: Cisco » Nexus 7000 Supervisor 2 » Version: N/A
When used together with: Cisco » Nexus 7000 Supervisor 2e » Version: N/A
When used together with: Cisco » Nexus 7700 Supervisor 2e » Version: N/A
When used together with: Cisco » Nexus 7700 Supervisor 3e » Version: N/A
Cisco » Nx-os
Versions from including (>=) 7.0\(3\)f and before (<) 9.2
cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » N9k-c9504-fm-r » Version: N/A
When used together with: Cisco » N9k-c9508-fm-r » Version: N/A
When used together with: Cisco » N9k-x96136yc-r » Version: N/A
When used together with: Cisco » N9k-x9636c-r » Version: N/A
When used together with: Cisco » N9k-x9636c-rx » Version: N/A
When used together with: Cisco » N9k-x9636q-r » Version: N/A
When used together with: Cisco » Nexus 36180yc-r » Version: N/A
When used together with: Cisco » Nexus 3636c-r » Version: N/A
When used together with: Cisco » X96136yc-r » Version: N/A
When used together with: Cisco » X9636c-r » Version: N/A
When used together with: Cisco » X9636c-rx » Version: N/A
When used together with: Cisco » X9636q-r » Version: N/A
Cisco » Nx-os
Versions before (<) 7.0\(3\)i4\(9\)
cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » N9k-c92160yc-x » Version: N/A
When used together with: Cisco » N9k-c9236c » Version: N/A
When used together with: Cisco » N9k-c9272q » Version: N/A
When used together with: Cisco » N9k-c93180lc-ex » Version: N/A
When used together with: Cisco » N9k-c93180yc-ex » Version: N/A
When used together with: Cisco » N9k-c93180yc-fx » Version: N/A
When used together with: Cisco » N9k-x9732c-ex » Version: N/A
When used together with: Cisco » N9k-x9736c-fx » Version: N/A
When used together with: Cisco » Nexus 3048 » Version: N/A
Cisco » Nx-os
Versions before (<) 7.1\(5\)n1\(1b\)
cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Nexus 5010 » Version: N/A
When used together with: Cisco » Nexus 5020 » Version: N/A
When used together with: Cisco » Nexus 5548p » Version: N/A
When used together with: Cisco » Nexus 5548up » Version: N/A
When used together with: Cisco » Nexus 5596t » Version: N/A
When used together with: Cisco » Nexus 5596up » Version: N/A
When used together with: Cisco » Nexus 56128p » Version: N/A
When used together with: Cisco » Nexus 5624q » Version: N/A
When used together with: Cisco » Nexus 5648q » Version: N/A
When used together with: Cisco » Nexus 5672up » Version: N/A
When used together with: Cisco » Nexus 5672up-16g » Version: N/A
When used together with: Cisco » Nexus 5696q » Version: N/A
When used together with: Cisco » Nexus 6001 » Version: N/A
When used together with: Cisco » Nexus 6004 » Version: N/A
Cisco » Nx-os
Versions before (<) 6.2\(22\)
cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » 7000 10-slot » Version: N/A
When used together with: Cisco » 7000 18-slot » Version: N/A
When used together with: Cisco » 7000 4-slot » Version: N/A
When used together with: Cisco » 7000 9-slot » Version: N/A
When used together with: Cisco » 7700 10-slot » Version: N/A
When used together with: Cisco » 7700 18-slot » Version: N/A
When used together with: Cisco » 7700 2-slot » Version: N/A
When used together with: Cisco » 7700 6-slot » Version: N/A
When used together with: Cisco » N77-f312ck-26 » Version: N/A
When used together with: Cisco » N77-f324fq-25 » Version: N/A
When used together with: Cisco » N77-f348xp-23 » Version: N/A
When used together with: Cisco » N77-f430cq-36 » Version: N/A
When used together with: Cisco » N77-m312cq-26l » Version: N/A
When used together with: Cisco » N77-m324fq-25l » Version: N/A
When used together with: Cisco » N77-m348xp-23l » Version: N/A
When used together with: Cisco » N7k-f248xp-25e » Version: N/A
When used together with: Cisco » N7k-f306ck-25 » Version: N/A
When used together with: Cisco » N7k-f312fq-25 » Version: N/A
When used together with: Cisco » N7k-m202cf-22l » Version: N/A
When used together with: Cisco » N7k-m206fq-23l » Version: N/A
When used together with: Cisco » N7k-m224xp-23l » Version: N/A
When used together with: Cisco » N7k-m324fq-25l » Version: N/A
When used together with: Cisco » N7k-m348xp-25l » Version: N/A
When used together with: Cisco » Nexus 7000 Supervisor 1 » Version: N/A
When used together with: Cisco » Nexus 7000 Supervisor 2 » Version: N/A
When used together with: Cisco » Nexus 7000 Supervisor 2e » Version: N/A
When used together with: Cisco » Nexus 7700 Supervisor 2e » Version: N/A
When used together with: Cisco » Nexus 7700 Supervisor 3e » Version: N/A
Cisco » Nx-os
Versions before (<) 3.2\(3k\)
cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Ucs-6296up » Version: N/A
When used together with: Cisco » Ucs 6248up » Version: N/A
When used together with: Cisco » Ucs 6324 » Version: N/A
When used together with: Cisco » Ucs 6332 » Version: N/A
When used together with: Cisco » Ucs 6332-16up » Version: N/A
Cisco » Nx-os
Versions from including (>=) 8.0 and before (<) 8.2\(3\)
cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » 7000 10-slot » Version: N/A
When used together with: Cisco » 7000 18-slot » Version: N/A
When used together with: Cisco » 7000 4-slot » Version: N/A
When used together with: Cisco » 7000 9-slot » Version: N/A
When used together with: Cisco » 7700 10-slot » Version: N/A
When used together with: Cisco » 7700 18-slot » Version: N/A
When used together with: Cisco » 7700 2-slot » Version: N/A
When used together with: Cisco » 7700 6-slot » Version: N/A
When used together with: Cisco » N77-f312ck-26 » Version: N/A
When used together with: Cisco » N77-f324fq-25 » Version: N/A
When used together with: Cisco » N77-f348xp-23 » Version: N/A
When used together with: Cisco » N77-f430cq-36 » Version: N/A
When used together with: Cisco » N77-m312cq-26l » Version: N/A
When used together with: Cisco » N77-m324fq-25l » Version: N/A
When used together with: Cisco » N77-m348xp-23l » Version: N/A
When used together with: Cisco » N7k-f248xp-25e » Version: N/A
When used together with: Cisco » N7k-f306ck-25 » Version: N/A
When used together with: Cisco » N7k-f312fq-25 » Version: N/A
When used together with: Cisco » N7k-m202cf-22l » Version: N/A
When used together with: Cisco » N7k-m206fq-23l » Version: N/A
When used together with: Cisco » N7k-m224xp-23l » Version: N/A
When used together with: Cisco » N7k-m324fq-25l » Version: N/A
When used together with: Cisco » N7k-m348xp-25l » Version: N/A
When used together with: Cisco » Nexus 7000 Supervisor 1 » Version: N/A
When used together with: Cisco » Nexus 7000 Supervisor 2 » Version: N/A
When used together with: Cisco » Nexus 7000 Supervisor 2e » Version: N/A
When used together with: Cisco » Nexus 7700 Supervisor 2e » Version: N/A
When used together with: Cisco » Nexus 7700 Supervisor 3e » Version: N/A
Cisco » Nx-os
Versions from including (>=) 7.2 and before (<) 7.3\(4\)d1\(1\)
cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » 7000 10-slot » Version: N/A
When used together with: Cisco » 7000 18-slot » Version: N/A
When used together with: Cisco » 7000 4-slot » Version: N/A
When used together with: Cisco » 7000 9-slot » Version: N/A
When used together with: Cisco » 7700 10-slot » Version: N/A
When used together with: Cisco » 7700 18-slot » Version: N/A
When used together with: Cisco » 7700 2-slot » Version: N/A
When used together with: Cisco » 7700 6-slot » Version: N/A
When used together with: Cisco » N77-f312ck-26 » Version: N/A
When used together with: Cisco » N77-f324fq-25 » Version: N/A
When used together with: Cisco » N77-f348xp-23 » Version: N/A
When used together with: Cisco » N77-f430cq-36 » Version: N/A
When used together with: Cisco » N77-m312cq-26l » Version: N/A
When used together with: Cisco » N77-m324fq-25l » Version: N/A
When used together with: Cisco » N77-m348xp-23l » Version: N/A
When used together with: Cisco » N7k-f248xp-25e » Version: N/A
When used together with: Cisco » N7k-f306ck-25 » Version: N/A
When used together with: Cisco » N7k-f312fq-25 » Version: N/A
When used together with: Cisco » N7k-m202cf-22l » Version: N/A
When used together with: Cisco » N7k-m206fq-23l » Version: N/A
When used together with: Cisco » N7k-m224xp-23l » Version: N/A
When used together with: Cisco » N7k-m324fq-25l » Version: N/A
When used together with: Cisco » N7k-m348xp-25l » Version: N/A
When used together with: Cisco » Nexus 7000 Supervisor 1 » Version: N/A
When used together with: Cisco » Nexus 7000 Supervisor 2 » Version: N/A
When used together with: Cisco » Nexus 7000 Supervisor 2e » Version: N/A
When used together with: Cisco » Nexus 7700 Supervisor 2e » Version: N/A
When used together with: Cisco » Nexus 7700 Supervisor 3e » Version: N/A
Cisco » Nx-os
Versions from including (>=) 4.0 and before (<) 4.0\(2e\)
cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Ucs-6296up » Version: N/A
When used together with: Cisco » Ucs 6248up » Version: N/A
When used together with: Cisco » Ucs 6324 » Version: N/A
When used together with: Cisco » Ucs 6332 » Version: N/A
When used together with: Cisco » Ucs 6332-16up » Version: N/A
Cisco » Nx-os
Versions from including (>=) 7.3 and before (<) 7.3\(5\)n1\(1\)
cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Nexus 5010 » Version: N/A
When used together with: Cisco » Nexus 5020 » Version: N/A
When used together with: Cisco » Nexus 5548p » Version: N/A
When used together with: Cisco » Nexus 5548up » Version: N/A
When used together with: Cisco » Nexus 5596t » Version: N/A
When used together with: Cisco » Nexus 5596up » Version: N/A
When used together with: Cisco » Nexus 56128p » Version: N/A
When used together with: Cisco » Nexus 5624q » Version: N/A
When used together with: Cisco » Nexus 5648q » Version: N/A
When used together with: Cisco » Nexus 5672up » Version: N/A
When used together with: Cisco » Nexus 5672up-16g » Version: N/A
When used together with: Cisco » Nexus 5696q » Version: N/A
When used together with: Cisco » Nexus 6001 » Version: N/A
When used together with: Cisco » Nexus 6004 » Version: N/A
Cisco » Nx-os
Versions from including (>=) 7.0\(3\)i7 and before (<) 7.0\(3\)i7\(6\)
cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Nexus 3524-x/xl » Version: N/A
When used together with: Cisco » Nexus 3548-x/xl » Version: N/A
Cisco » Nx-os
Versions from including (>=) 7.3 and before (<) 8.4
cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Mds 9132t » Version: N/A
When used together with: Cisco » Mds 9148s » Version: N/A
When used together with: Cisco » Mds 9148t » Version: N/A
When used together with: Cisco » Mds 9216 » Version: N/A
When used together with: Cisco » Mds 9216a » Version: N/A
When used together with: Cisco » Mds 9216i » Version: N/A
When used together with: Cisco » Mds 9222i » Version: N/A
When used together with: Cisco » Mds 9250i » Version: N/A
When used together with: Cisco » Mds 9396s » Version: N/A
When used together with: Cisco » Mds 9396t » Version: N/A
When used together with: Cisco » Mds 9506 » Version: N/A
When used together with: Cisco » Mds 9509 » Version: N/A
When used together with: Cisco » Mds 9513 » Version: N/A
When used together with: Cisco » Mds 9706 » Version: N/A
When used together with: Cisco » Mds 9710 » Version: N/A
When used together with: Cisco » Mds 9718 » Version: N/A
Cisco » Nx-os
Versions from including (>=) 7.0\(3\)i7 and before (<) 7.0\(3\)i7\(4\)
cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » N9k-c92160yc-x » Version: N/A
When used together with: Cisco » N9k-c9236c » Version: N/A
When used together with: Cisco » N9k-c9272q » Version: N/A
When used together with: Cisco » N9k-c93180lc-ex » Version: N/A
When used together with: Cisco » N9k-c93180yc-ex » Version: N/A
When used together with: Cisco » N9k-c93180yc-fx » Version: N/A
When used together with: Cisco » N9k-x9732c-ex » Version: N/A
When used together with: Cisco » N9k-x9736c-fx » Version: N/A
When used together with: Cisco » Nexus 3048 » Version: N/A
Cisco » Nx-os
Versions from including (>=) 9.2 and before (<) 9.2\(3\)
cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Nexus 3524-x/xl » Version: N/A
When used together with: Cisco » Nexus 3548-x/xl » Version: N/A

Vulnerability Details : CVE-2019-1965

Exploit prediction scoring system (EPSS) score for CVE-2019-1965

CVSS scores for CVE-2019-1965

CWE ids for CVE-2019-1965

References for CVE-2019-1965

Products affected by CVE-2019-1965