CVE:CVE-2019-1869
CNNVD:CNNVD-201906-806
Cisco StarOS是美国思科（Cisco）公司的一套虚拟化操作系统。Cisco Virtualized Packet Core-Single Instance（VPC-SI）是一款被部署在专用硬件平台的StarOS软件的产品化版本。Virtualized Packet Core-Distributed Instance（VPC-DI）是一套被部署在专用硬件平台的StarOS软件的产品化版本。
Cisco StarOS中的内部数据包处理功能存在缓冲区错误漏洞，该漏洞源于逻辑错误。远程攻击者可通过发送特质的数据包利用该漏洞造成拒绝服务。以下产品及版本受到影响：Cisco Virtualized Packet Core-Single Instance (VPC-SI)；Virtualized Packet Core-Distributed Instance (VPC-DI)。
solution:Upgrade cisco staros to a higher version than 21.6.13,21.6b.16,21.7.11,21.8.10,21.9.7,21.10.2,21.11.1,and avoid the version [21.6,21.6.13),[21.6b,21.6b.16),[21.7,21.7.11),[21.8,21.8.10),[21.9,21.9.7),[21.10,21.10.2),[21.11,21.11.1)
solution:Upgrade cisco nx-os to a higher version than 8.3\(1\,7.0\(3\i7\(4\,7.0\(3\i7\(4\,7.0\(3\f3\(3c\,8.2\(3\,7.0\(3\f3\(3c\,8.1\(1b\,6.2\(25\,7.0\(3\i4\(9\,6.2\(22\,6.2\(22\,7.0\(3\i4\(9\,6.0\(2\a8\(10\,6.0\(2\a8,7.0\(3\i4,4.0\(2a\,3.2\(3j\,and avoid the version [8.2,8.3\(1\)),[7.0\(3\),7.0\(3\)i7\(4\)),[7.0\(3\)i5,7.0\(3\)i7\(4\)),[7.0\(3\)f3,7.0\(3\)f3\(3c\)),[7.2,8.2\(3\)),[7.0\(3\)f1,7.0\(3\)f3\(3c\)),[7.3,8.1\(1b\)),[5.2,6.2\(25\)),[7.0\(3\)i4,7.0\(3\)i4\(9\)),[6.2,6.2\(22\)),(,6.2\(22\)),(,7.0\(3\)i4\(9\)),[6.0\(2\)a8,6.0\(2\)a8\(10\)),(,6.0\(2\)a8],(,7.0\(3\)i4],[4.0,4.0\(2a\)),(,3.2\(3j\))