CVE-2019-12654 Cisco IOS and IOS XE Software Session Initiation Protocol Denial of Service Vulnerability

What is CVE-2019-12654?

CVE-2019-12654 is a high-severity vulnerability in Cisco Ios Xe, published on 25 Sep 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

A vulnerability in the common Session Initiation Protocol (SIP) library of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to insufficient sanity checks on an internal data structure. An attacker could exploit this vulnerability by sending a sequence of malicious SIP messages to an affected device. An exploit could allow the attacker to cause a NULL pointer dereference, resulting in a crash of the iosd process. This triggers a reload of the device.

Weakness: CWE-476

Which versions are affected by CVE-2019-12654?

It affects 1 product.

Products include Cisco Ios Xe.

How do I fix CVE-2019-12654?

No fix has been published for CVE-2019-12654 yet. Limit exposure of the affected software until one is available.

Is CVE-2019-12654 being exploited?

There is no known exploitation of CVE-2019-12654 in the wild and no public exploit code.

Other vulnerabilities in Cisco Ios Xe

• CVE-2023-20198 Cisco IOS XE Web UI Privilege Escalation Exploited Critical 10.0
• CVE-2018-0151 Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Exploited Critical 9.8
• CVE-2023-20273 Cisco IOS XE Web UI Command Injection Exploited High 7.2
• CVE-2025-20188 Hardcoded credentials in Cisco IOS XE Software Critical 10.0
• CVE-2021-34770 Cisco IOS XE Software for Catalyst 9000 Family Wireless Controllers CAPWAP Remote Code Execution Vulnerability Critical 10.0

All Cisco Ios Xe vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-fg75-chcf-xjg7.