CVE编号
CVE-2019-1710利用情况
暂无补丁情况
N/A披露时间
2019-04-18漏洞描述
运行Cisco IOS XR 64位软件的Cisco ASR 9000系列聚合服务路由器上的sysadmin虚拟机（VM）中的漏洞可能允许未经身份验证的远程攻击者访问在sysadmin VM上运行的内部应用程序。该漏洞是由于辅助管理接口与内部sysadmin应用程序的错误隔离造成的。攻击者可以通过连接到其中一个侦听内部应用程序来利用此漏洞。成功利用可能会导致不稳定的情况，包括拒绝服务和远程未经身份验证的设备访问。此漏洞已在Cisco IOS XR 64位软件版本6.5.3和7.0.1中得到修复，它将编辑calvados_boostrap.cfg文件并重新加载设备。<br>解决建议
建议您更新当前系统或软件至最新版，完成漏洞的修复。
参考链接 |
|
|---|---|
| http://www.securityfocus.com/bid/108007 | |
| https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-s... |
受影响软件情况
| # | 类型 | 厂商 | 产品 | 版本 | 影响面 | ||||
| 1 | |||||||||
|---|---|---|---|---|---|---|---|---|---|
| 运行在以下环境 | |||||||||
| 系统 | cisco | ios_xr | * |
Up to (excluding) 6.5.3 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | ios_xr | * |
From (including) 7.0 |
Up to (excluding) 7.0.1 |
||||
| 运行在以下环境 | |||||||||
| 系统 | fedora_29 | koji-builder | * |
Up to (excluding) 1.19.1-1.fc29 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | fedora_29 | koji-builder-plugins | * |
Up to (excluding) 1.19.1-1.fc29 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | fedora_29 | koji-hub | * |
Up to (excluding) 1.19.1-1.fc29 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | fedora_29 | koji-utils | * |
Up to (excluding) 1.19.1-1.fc29 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | fedora_29 | koji-web | * |
Up to (excluding) 1.19.1-1.fc29 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | fedora_29 | python3-koji-cli-plugins | * |
Up to (excluding) 1.19.1-1.fc29 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | fedora_29 | python3-koji-hub-plugins | * |
Up to (excluding) 1.19.1-1.fc29 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | fedora_29 | python3-koji-we | * |
Up to (excluding) 1.19.1-1.fc29 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | fedora_30 | koji-builder | * |
Up to (excluding) 1.18.1-1.fc30 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | fedora_30 | koji-builder-plugins | * |
Up to (excluding) 1.18.1-1.fc30 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | fedora_30 | koji-hub | * |
Up to (excluding) 1.18.1-1.fc30 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | fedora_30 | koji-utils | * |
Up to (excluding) 1.18.1-1.fc30 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | fedora_30 | koji-web | * |
Up to (excluding) 1.18.1-1.fc30 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | fedora_30 | python3-koji-cli-plugins | * |
Up to (excluding) 1.18.1-1.fc30 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | fedora_30 | python3-koji-hub-plugins | * |
Up to (excluding) 1.18.1-1.fc30 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | fedora_30 | python3-koji-we | * |
Up to (excluding) 1.18.1-1.fc30 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | fedora_31 | koji-builder | * |
Up to (excluding) 1.18.1-1.fc31 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | fedora_31 | koji-builder-plugins | * |
Up to (excluding) 1.18.1-1.fc31 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | fedora_31 | koji-hub | * |
Up to (excluding) 1.18.1-1.fc31 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | fedora_31 | koji-utils | * |
Up to (excluding) 1.18.1-1.fc31 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | fedora_31 | koji-web | * |
Up to (excluding) 1.18.1-1.fc31 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | fedora_31 | python3-koji-cli-plugins | * |
Up to (excluding) 1.18.1-1.fc31 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | fedora_31 | python3-koji-hub-plugins | * |
Up to (excluding) 1.18.1-1.fc31 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | fedora_31 | python3-koji-we | * |
Up to (excluding) 1.18.1-1.fc31 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | fedora_EPEL_7 | koji-builder | * |
Up to (excluding) 1.18.1-1.el7 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | fedora_EPEL_7 | koji-builder-plugins | * |
Up to (excluding) 1.18.1-1.el7 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | fedora_EPEL_7 | koji-hub | * |
Up to (excluding) 1.18.1-1.el7 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | fedora_EPEL_7 | koji-utils | * |
Up to (excluding) 1.18.1-1.el7 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | fedora_EPEL_7 | koji-web | * |
Up to (excluding) 1.18.1-1.el7 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | fedora_EPEL_7 | python3-koji-cli-plugins | * |
Up to (excluding) 1.18.1-1.el7 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | fedora_EPEL_7 | python3-koji-hub-plugins | * |
Up to (excluding) 1.18.1-1.el7 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | fedora_EPEL_7 | python3-koji-we | * |
Up to (excluding) 1.18.1-1.el7 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | fedora_EPEL_8 | koji-builder | * |
Up to (excluding) 1.19.0-1.el8 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | fedora_EPEL_8 | koji-builder-plugins | * |
Up to (excluding) 1.19.0-1.el8 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | fedora_EPEL_8 | koji-hub | * |
Up to (excluding) 1.19.0-1.el8 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | fedora_EPEL_8 | koji-utils | * |
Up to (excluding) 1.19.0-1.el8 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | fedora_EPEL_8 | koji-web | * |
Up to (excluding) 1.19.0-1.el8 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | fedora_EPEL_8 | python3-koji-cli-plugins | * |
Up to (excluding) 1.19.0-1.el8 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | fedora_EPEL_8 | python3-koji-hub-plugins | * |
Up to (excluding) 1.19.0-1.el8 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | fedora_EPEL_8 | python3-koji-we | * |
Up to (excluding) 1.19.0-1.el8 |
|||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | asr_9000 | - | - | |||||
- 攻击路径 网络
- 攻击复杂度 低
- 权限要求 无
- 影响范围 未更改
- 用户交互 无
- 可用性 高
- 保密性 高
- 完整性 高
还没有评论，来说两句吧...