CVE-2019-1651— Cisco SD-WAN Solution Buffer Overflow Vulnerability

Cisco SD-WAN Solution Buffer Overflow Vulnerability

A vulnerability in the vContainer of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to cause a denial of service (DoS) condition and execute arbitrary code as the root user. The vulnerability is due to improper bounds checking by the vContainer. An attacker could exploit this vulnerability by sending a malicious file to an affected vContainer instance. A successful exploit could allow the attacker to cause a buffer overflow condition on the affected vContainer, which could result in a DoS condition that the attacker could use to execute arbitrary code as the root user.

N/A

内存缓冲区边界内操作的限制不恰当

Cisco SD-WAN Solution vContainer 缓冲区错误漏洞

Cisco SD-WAN Solution是美国思科（Cisco）公司的一套网络扩展解决方案。vContainer是其中的一个容器组件。 Cisco SD-WAN Solution 18.4.0之前版本中的vContainer存在缓冲区溢出漏洞，该漏洞源于程序执行了错误的边界检测。远程攻击者可通过发送恶意的文件利用该漏洞造成拒绝服务并以root用户身份执行任意代码。

N/A

N/A