Cisco IOS H.323 Message Validation DoS (cisco-sa-20160928-h323)

#TRUSTED 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
#
# (C) Tenable Network Security, Inc.
#

include('compat.inc');

if (description)
{
  script_id(130764);
  script_version("1.8");
  script_set_attribute(attribute:"plugin_modification_date", value:"2021/01/14");

  script_cve_id("CVE-2016-6384");
  script_bugtraq_id(93209);
  script_xref(name:"CISCO-BUG-ID", value:"CSCux04257");
  script_xref(name:"CISCO-SA", value:"cisco-sa-20160928-h323");

  script_name(english:"Cisco IOS H.323 Message Validation DoS (cisco-sa-20160928-h323)");

  script_set_attribute(attribute:"synopsis", value:
"The remote device is missing a vendor-supplied security patch");
  script_set_attribute(attribute:"description", value:
"According to its self-reported version, Cisco IOS Software is affected by a vulnerability in the H.323 subsystem due to
a failure to properly validate certain fields in an H.323 protocol suite message. An unauthenticated, remote attacker
may exploit this, by sending a malicious message, causing an affected device to attempt to access an invalid memory
region, crash, and restart. 

Please see the included Cisco BIDs and Cisco Security Advisory for more information.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version
number.");
  # https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160928-h323
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?4b960210");
  script_set_attribute(attribute:"see_also", value:"https://tools.cisco.com/security/center/viewErp.x?alertId=ERP-56513");
  script_set_attribute(attribute:"see_also", value:"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCux04257");
  script_set_attribute(attribute:"solution", value:
"Upgrade to the relevant fixed version referenced in Cisco bug ID CSCux04257");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2016-6384");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");

  script_set_attribute(attribute:"vuln_publication_date", value:"2016/10/05");
  script_set_attribute(attribute:"patch_publication_date", value:"2016/09/28");
  script_set_attribute(attribute:"plugin_publication_date", value:"2019/11/12");

  script_set_attribute(attribute:"plugin_type", value:"combined");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:cisco:ios");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"CISCO");

  script_copyright(english:"This script is Copyright (C) 2019-2021 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("cisco_ios_version.nasl");
  script_require_keys("Host/Cisco/IOS/Version");

  exit(0);
}

include('cisco_workarounds.inc');
include('ccf.inc');

product_info = cisco::get_product_info(name:'Cisco IOS');

version_list=make_list(
  '12.2(15)B',
  '12.2(16)B1',
  '12.2(16)B3',
  '12.2(16)B2',
  '12.2(15)B1',
  '12.2(16)B',
  '12.2(4)YH',
  '12.2(15)MC1c',
  '12.2(15)MC1b',
  '12.2(15)MC1a',
  '12.2(8)YJ',
  '12.2(8)YJ1',
  '12.2(11)YT',
  '12.2(11)YT1',
  '12.2(11)YT2',
  '12.2(8)YN',
  '12.2(8)YN1',
  '12.2(8)YL',
  '12.2(8)YM',
  '12.2(11)YU',
  '12.2(11)YV',
  '12.2(11)ZC',
  '12.2(13)ZC',
  '12.2(13)ZD',
  '12.2(13)ZD3',
  '12.2(13)ZD2',
  '12.2(13)ZD1',
  '12.2(13)ZD4',
  '12.2(13)ZE',
  '12.2(13)ZF',
  '12.2(13)ZF2',
  '12.2(13)ZF1',
  '12.2(13)ZH',
  '12.2(13)ZH5',
  '12.2(13)ZH9',
  '12.2(13)ZH2',
  '12.2(13)ZH8',
  '12.2(13)ZH10',
  '12.2(13)ZH4',
  '12.2(13)ZH3',
  '12.2(13)ZH7',
  '12.2(13)ZH6',
  '12.2(15)ZJ',
  '12.2(15)ZJ2',
  '12.2(15)ZJ1',
  '12.2(15)ZJ4',
  '12.2(15)ZJ3',
  '12.2(15)ZJ5',
  '12.2(15)ZL',
  '12.2(15)ZL1',
  '12.3(9a)',
  '12.3(15)',
  '12.3(19)',
  '12.3(10f)',
  '12.3(10a)',
  '12.3(1)',
  '12.3(1a)',
  '12.3(10)',
  '12.3(10b)',
  '12.3(10c)',
  '12.3(10d)',
  '12.3(10e)',
  '12.3(12b)',
  '12.3(12a)',
  '12.3(12c)',
  '12.3(12d)',
  '12.3(12e)',
  '12.3(12)',
  '12.3(13)',
  '12.3(13a)',
  '12.3(13b)',
  '12.3(15a)',
  '12.3(16)',
  '12.3(17)',
  '12.3(17a)',
  '12.3(17b)',
  '12.3(18)',
  '12.3(20)',
  '12.3(3f)',
  '12.3(3e)',
  '12.3(3d)',
  '12.3(3g)',
  '12.3(3c)',
  '12.3(3b)',
  '12.3(3a)',
  '12.3(3)',
  '12.3(3i)',
  '12.3(3h)',
  '12.3(5c)',
  '12.3(5b)',
  '12.3(5a)',
  '12.3(5)',
  '12.3(5f)',
  '12.3(5e)',
  '12.3(5d)',
  '12.3(6f)',
  '12.3(6e)',
  '12.3(6d)',
  '12.3(6c)',
  '12.3(6b)',
  '12.3(6a)',
  '12.3(6)',
  '12.3(9d)',
  '12.3(9e)',
  '12.3(9)',
  '12.3(9b)',
  '12.3(9c)',
  '12.3(16a)',
  '12.3(15b)',
  '12.3(21)',
  '12.3(21a)',
  '12.3(22)',
  '12.3(21b)',
  '12.3(23)',
  '12.3(26)',
  '12.3(20a)',
  '12.3(22a)',
  '12.3(25)',
  '12.3(17c)',
  '12.3(24)',
  '12.3(19a)',
  '12.3(24a)',
  '12.3(18a)',
  '12.3(1a)B',
  '12.3(3)B',
  '12.3(5a)B',
  '12.3(3)B1',
  '12.3(5a)B3',
  '12.3(5a)B2',
  '12.3(5a)B0a',
  '12.3(5a)B5',
  '12.3(5a)B4',
  '12.3(5a)B1',
  '12.3(11)T',
  '12.3(7)T12',
  '12.3(11)T11',
  '12.3(11)T10',
  '12.3(14)T7',
  '12.3(14)T',
  '12.3(8)T',
  '12.3(2)T',
  '12.3(4)T',
  '12.3(7)T',
  '12.3(8)T9',
  '12.3(11)T2a',
  '12.3(2)T9',
  '12.3(8)T6',
  '12.3(4)T2a',
  '12.3(4)T12',
  '12.3(4)T9',
  '12.3(14)T4',
  '12.3(4)T4',
  '12.3(2)T1',
  '12.3(8)T2',
  '12.3(11)T5',
  '12.3(7)T3',
  '12.3(2)T2',
  '12.3(8)T3',
  '12.3(4)T7',
  '12.3(8)T7',
  '12.3(11)T8',
  '12.3(7)T2',
  '12.3(8)T4',
  '12.3(8)T8',
  '12.3(14)T5',
  '12.3(11)T3',
  '12.3(4)T10',
  '12.3(2)T4',
  '12.3(8)T10',
  '12.3(14)T2',
  '12.3(4)T2',
  '12.3(7)T7',
  '12.3(7)T10',
  '12.3(4)T5',
  '12.3(7)T4',
  '12.3(11)T6',
  '12.3(7)T11',
  '12.3(4)T6',
  '12.3(2)T3',
  '12.3(2)T5',
  '12.3(2)T6',
  '12.3(7)T5',
  '12.3(4)T3',
  '12.3(14)T3',
  '12.3(2)T8',
  '12.3(11)T4',
  '12.3(7)T9',
  '12.3(8)T11',
  '12.3(11)T1',
  '12.3(8)T0a',
  '12.3(11)T9',
  '12.3(7)T8',
  '12.3(4)T1',
  '12.3(8)T5',
  '12.3(4)T11',
  '12.3(4)T8',
  '12.3(14)T1',
  '12.3(11)T2',
  '12.3(7)T6',
  '12.3(2)T7',
  '12.3(11)T7',
  '12.3(7)T1',
  '12.3(14)T6',
  '12.3(11)T12',
  '12.3(8)T1',
  '12.2(15)CZ',
  '12.2(15)CZ1',
  '12.2(15)CZ3',
  '12.2(15)CZ2',
  '12.2(15)ZK',
  '12.2(15)ZK5',
  '12.2(15)ZK4',
  '12.2(15)ZK1',
  '12.2(15)ZK6',
  '12.2(15)ZK3',
  '12.2(15)ZK2',
  '12.2(15)ZO',
  '12.2(13)ZP',
  '12.2(13)ZP1',
  '12.2(13)ZP3',
  '12.2(13)ZP2',
  '12.2(13)ZP4',
  '12.3(2)XA',
  '12.3(2)XA4',
  '12.3(2)XA7',
  '12.3(2)XA1',
  '12.3(2)XA3',
  '12.3(2)XA6',
  '12.3(2)XA2',
  '12.3(2)XA5',
  '12.3(4)XQ',
  '12.3(4)XQ1',
  '12.3(4)XN',
  '12.3(4)XN1',
  '12.3(4)XN2',
  '12.3(11)XL',
  '12.3(7)XL',
  '12.3(11)XL1',
  '12.3(11)XL3',
  '12.3(11)XL2',
  '12.3(4)XK3',
  '12.3(4)XK1',
  '12.3(4)XK4',
  '12.3(4)XK',
  '12.3(4)XK2',
  '12.3(7)XJ',
  '12.3(7)XJ1',
  '12.3(7)XJ2',
  '12.3(7)XI',
  '12.3(7)XI7',
  '12.3(7)XI1',
  '12.3(7)XI7a',
  '12.3(7)XI2b',
  '12.3(7)XI3a',
  '12.3(7)XI3',
  '12.3(7)XI6',
  '12.3(7)XI2',
  '12.3(7)XI5',
  '12.3(4)XH',
  '12.3(4)XH1',
  '12.3(4)XG',
  '12.3(4)XG3',
  '12.3(4)XG1',
  '12.3(4)XG4',
  '12.3(4)XG2',
  '12.3(4)XG5',
  '12.3(2)XF',
  '12.3(2)XE',
  '12.3(2)XE5',
  '12.3(2)XE2',
  '12.3(2)XE1',
  '12.3(2)XE4',
  '12.3(2)XE3',
  '12.3(4)XD',
  '12.3(4)XD4',
  '12.3(4)XD1',
  '12.3(4)XD3',
  '12.3(4)XD2',
  '12.3(2)XC',
  '12.3(2)XC4',
  '12.3(2)XC3',
  '12.3(2)XC2',
  '12.3(2)XC1',
  '12.3(2)XC5',
  '12.3(2)XB2',
  '12.3(2)XB',
  '12.3(2)XB3',
  '12.3(2)XB1',
  '12.2(15)ZN',
  '12.3(7)XM',
  '12.3(7)XR',
  '12.3(7)XR4',
  '12.3(7)XR3',
  '12.3(7)XR5',
  '12.3(7)XR6',
  '12.3(7)XR1',
  '12.3(7)XR2',
  '12.3(7)XR7',
  '12.3(7)XS',
  '12.3(7)XS2',
  '12.3(7)XS1',
  '12.3(8)XU5',
  '12.3(8)XU2',
  '12.3(8)XU4',
  '12.3(8)XU3',
  '12.3(8)XX',
  '12.3(8)XX2a',
  '12.3(8)XX2',
  '12.3(8)XX1',
  '12.3(8)XX2d',
  '12.3(8)XX2b',
  '12.3(8)XX2e',
  '12.3(8)XX2c',
  '12.3(8)XW',
  '12.3(8)XW2',
  '12.3(8)XW3',
  '12.3(8)XW1',
  '12.3(8)XW1b',
  '12.3(8)XW1a',
  '12.3(8)XY',
  '12.3(8)XY3',
  '12.3(8)XY5',
  '12.3(8)XY4',
  '12.3(8)XY1',
  '12.3(8)XY7',
  '12.3(8)XY2',
  '12.3(8)XY6',
  '12.3(2)XZ1',
  '12.3(2)XZ2',
  '12.3(8)YA',
  '12.3(8)YA1',
  '12.3(8)YD',
  '12.3(8)YD1',
  '12.3(4)YE',
  '12.3(4)YE1',
  '12.3(11)YF',
  '12.3(11)YF2',
  '12.3(11)YF3',
  '12.3(11)YF4',
  '12.3(11)YF1',
  '12.3(8)YH',
  '12.3(8)YG',
  '12.3(8)YG7',
  '12.3(8)YG5',
  '12.3(8)YG3',
  '12.3(8)YG6',
  '12.3(8)YG2',
  '12.3(8)YG1',
  '12.3(8)YG4',
  '12.3(8)YC',
  '12.3(8)YC2',
  '12.3(8)YC3',
  '12.3(8)YC1',
  '12.3(11)YL',
  '12.3(11)YL2',
  '12.3(11)YL1',
  '12.3(8)YI',
  '12.3(8)YI2',
  '12.3(8)YI3',
  '12.3(8)YI1',
  '12.3(11)YK',
  '12.3(11)YK1',
  '12.3(11)YK2',
  '12.3(11)YK3',
  '12.3(2)JA3',
  '12.3(2)JA4',
  '12.3(11)JA2',
  '12.3(14)YQ8',
  '12.3(14)YQ',
  '12.3(14)YQ5',
  '12.3(14)YQ4',
  '12.3(14)YQ7',
  '12.3(14)YQ1',
  '12.3(14)YQ6',
  '12.3(14)YQ3',
  '12.3(14)YQ2',
  '12.3(7)YB',
  '12.3(7)YB1',
  '12.3(11)YR',
  '12.3(11)YR1',
  '12.3(11)YS',
  '12.3(11)YS1',
  '12.3(11)YS2',
  '12.4(3e)',
  '12.4(7b)',
  '12.4(8)',
  '12.4(5b)',
  '12.4(7a)',
  '12.4(3d)',
  '12.4(1)',
  '12.4(1a)',
  '12.4(1b)',
  '12.4(1c)',
  '12.4(10)',
  '12.4(3)',
  '12.4(3a)',
  '12.4(3b)',
  '12.4(3c)',
  '12.4(3f)',
  '12.4(5)',
  '12.4(5a)',
  '12.4(7c)',
  '12.4(7)',
  '12.4(8a)',
  '12.4(8b)',
  '12.4(7d)',
  '12.4(3g)',
  '12.4(8c)',
  '12.4(10b)',
  '12.4(12)',
  '12.4(12a)',
  '12.4(12b)',
  '12.4(13)',
  '12.4(13a)',
  '12.4(13b)',
  '12.4(13c)',
  '12.4(7e)',
  '12.4(17)',
  '12.4(25e)',
  '12.4(18b)',
  '12.4(18e)',
  '12.4(25g)',
  '12.4(3i)',
  '12.4(3j)',
  '12.4(23b)',
  '12.4(3h)',
  '12.4(7h)',
  '12.4(25a)',
  '12.4(23d)',
  '12.4(23e)',
  '12.4(16)',
  '12.4(13d)',
  '12.4(25)',
  '12.4(25c)',
  '12.4(18d)',
  '12.4(19)',
  '12.4(13e)',
  '12.4(25b)',
  '12.4(23)',
  '12.4(10c)',
  '12.4(21)',
  '12.4(16b)',
  '12.4(16a)',
  '12.4(23a)',
  '12.4(25d)',
  '12.4(23c)',
  '12.4(7f)',
  '12.4(18)',
  '12.4(21a)',
  '12.4(13f)',
  '12.4(25f)',
  '12.4(18c)',
  '12.4(5c)',
  '12.4(8d)',
  '12.4(12c)',
  '12.4(17a)',
  '12.4(18a)',
  '12.4(17b)',
  '12.4(7g)',
  '12.3(8)JK',
  '12.3(14)YU',
  '12.3(14)YU1',
  '12.4(6)MR1',
  '12.4(11)MR',
  '12.4(2)MR',
  '12.4(4)MR',
  '12.4(6)MR',
  '12.4(9)MR',
  '12.4(12)MR',
  '12.4(16)MR',
  '12.4(16)MR1',
  '12.4(19)MR2',
  '12.4(19)MR1',
  '12.4(19)MR',
  '12.4(20)MR',
  '12.4(4)MR1',
  '12.4(19)MR3',
  '12.4(12)MR1',
  '12.4(20)MR2',
  '12.4(16)MR2',
  '12.4(12)MR2',
  '12.4(2)MR1',
  '12.4(20)MR1',
  '12.4(4)T',
  '12.4(4)T1',
  '12.4(4)T2',
  '12.4(4)T3',
  '12.4(6)T',
  '12.4(6)T1',
  '12.4(6)T2',
  '12.4(9)T',
  '12.4(4)T4',
  '12.4(2)T5',
  '12.4(6)T3',
  '12.4(2)T',
  '12.4(11)T',
  '12.4(15)T',
  '12.4(20)T',
  '12.4(24)T',
  '12.4(24)T3',
  '12.4(4)T8',
  '12.4(20)T1',
  '12.4(22)T1',
  '12.4(15)T9',
  '12.4(11)T4',
  '12.4(15)T8',
  '12.4(6)T5',
  '12.4(15)T15',
  '12.4(24)T5',
  '12.4(15)T2',
  '12.4(6)T8',
  '12.4(6)T5b',
  '12.4(15)T12',
  '12.4(24)T4',
  '12.4(6)T11',
  '12.4(9)T5',
  '12.4(20)T3',
  '12.4(6)T4',
  '12.4(6)T5f',
  '12.4(4)T6',
  '12.4(22)T',
  '12.4(15)T6a',
  '12.4(20)T6',
  '12.4(9)T3',
  '12.4(24)T8',
  '12.4(6)T7',
  '12.4(15)T13',
  '12.4(6)T10',
  '12.4(15)T3',
  '12.4(24)T2',
  '12.4(22)T5',
  '12.4(2)T3',
  '12.4(15)T10',
  '12.4(22)T4',
  '12.4(20)T5',
  '12.4(9)T6',
  '12.4(15)T4',
  '12.4(6)T5e',
  '12.4(2)T4',
  '12.4(24)T1',
  '12.4(9)T4',
  '12.4(24)T7',
  '12.4(22)T3',
  '12.4(20)T9',
  '12.4(9)T1',
  '12.4(24)T6',
  '12.4(6)T9',
  '12.4(6)T12',
  '12.4(15)T13b',
  '12.4(20)T5a',
  '12.4(15)T5',
  '12.4(4)T7',
  '12.4(20)T2',
  '12.4(2)T1',
  '12.4(11)T1',
  '12.4(15)T11',
  '12.4(6)T5c',
  '12.4(2)T6',
  '12.4(9)T0a',
  '12.4(2)T2',
  '12.4(15)T7',
  '12.4(11)T2',
  '12.4(9)T7',
  '12.4(15)T14',
  '12.4(11)T3',
  '12.4(15)T6',
  '12.4(15)T16',
  '12.4(15)T1',
  '12.4(9)T2',
  '12.4(6)T6',
  '12.4(6)T5a',
  '12.4(22)T2',
  '12.4(6)T5d',
  '12.4(4)T5',
  '12.4(20)T4',
  '12.4(15)T17',
  '12.4(24)T9',
  '12.4(24)T10',
  '12.4(24)T11',
  '12.4(24)T12',
  '12.3(14)YT',
  '12.3(14)YT1',
  '12.3(11)JX',
  '12.3(7)JX9',
  '12.3(11)JX1',
  '12.3(4)TPC11b',
  '12.3(4)TPC11a',
  '12.4(2)XB',
  '12.4(2)XB1',
  '12.4(2)XB6',
  '12.4(2)XB7',
  '12.4(2)XB11',
  '12.4(2)XB3',
  '12.4(2)XB9',
  '12.4(2)XB8',
  '12.4(2)XB2',
  '12.4(2)XB10',
  '12.4(2)XB4',
  '12.4(2)XB5',
  '12.4(2)XA',
  '12.4(2)XA1',
  '12.4(2)XA2',
  '12.3(14)YM8',
  '12.3(14)YM12',
  '12.3(14)YM4',
  '12.3(14)YM3',
  '12.3(14)YM7',
  '12.3(14)YM1',
  '12.3(14)YM11',
  '12.3(14)YM9',
  '12.3(14)YM6',
  '12.3(14)YM10',
  '12.3(14)YM13',
  '12.3(14)YM5',
  '12.3(14)YM2',
  '12.4(4)XC',
  '12.4(4)XC1',
  '12.4(4)XC5',
  '12.4(4)XC7',
  '12.4(4)XC3',
  '12.4(4)XC4',
  '12.4(4)XC2',
  '12.4(4)XC6',
  '12.4(4)XD',
  '12.4(4)XD4',
  '12.4(4)XD10',
  '12.4(4)XD6',
  '12.4(4)XD12',
  '12.4(4)XD2',
  '12.4(4)XD8',
  '12.4(4)XD11',
  '12.4(4)XD1',
  '12.4(4)XD5',
  '12.4(4)XD7',
  '12.4(4)XD3',
  '12.4(4)XD9',
  '12.4(6)XE',
  '12.4(6)XE2',
  '12.4(6)XE1',
  '12.3(11)YZ1',
  '12.3(11)YZ',
  '12.3(11)YZ2',
  '12.4(11)SW',
  '12.4(15)SW6',
  '12.4(15)SW',
  '12.4(11)SW1',
  '12.4(15)SW5',
  '12.4(15)SW1',
  '12.4(15)SW4',
  '12.4(11)SW3',
  '12.4(11)SW2',
  '12.4(15)SW3',
  '12.4(15)SW2',
  '12.4(15)SW7',
  '12.4(15)SW8',
  '12.4(15)SW8a',
  '12.4(15)SW9',
  '12.4(11)XJ',
  '12.4(11)XJ1',
  '12.4(11)XJ3',
  '12.4(11)XJ6',
  '12.4(11)XJ2',
  '12.4(11)XJ5',
  '12.4(11)XJ4',
  '12.4(6)XT',
  '12.4(6)XT1',
  '12.4(6)XT2',
  '12.4(6)XP',
  '12.2(15)ZR',
  '12.2(13)ZT',
  '12.4(14)XK',
  '12.4(11)XV',
  '12.4(11)XV1',
  '12.4(11)XW',
  '12.4(11)XW3',
  '12.4(11)XW7',
  '12.4(11)XW10',
  '12.4(11)XW8',
  '12.4(11)XW9',
  '12.4(11)XW6',
  '12.4(11)XW4',
  '12.4(11)XW1',
  '12.4(11)XW5',
  '12.4(11)XW2',
  '12.4(15)XF',
  '12.4(15)XY4',
  '12.4(15)XY5',
  '12.4(15)XY1',
  '12.4(15)XY',
  '12.4(15)XY2',
  '12.4(15)XY3',
  '12.4(15)XZ',
  '12.4(15)XZ2',
  '12.4(15)XZ1',
  '12.4(15)XL3',
  '12.4(15)XL1',
  '12.4(15)XL2',
  '12.4(15)XL4',
  '12.4(15)XL5',
  '12.4(15)XL',
  '12.3(8)ZA',
  '12.3(8)ZA1',
  '12.3(11)ZB',
  '12.3(11)ZB1',
  '12.3(11)ZB2',
  '12.4(15)XM1',
  '12.4(15)XM2',
  '15.0(1)M1',
  '15.0(1)M5',
  '15.0(1)M4',
  '15.0(1)M3',
  '15.0(1)M2',
  '15.0(1)M6',
  '15.0(1)M',
  '15.0(1)M7',
  '15.0(1)M10',
  '15.0(1)M9',
  '15.0(1)M8',
  '15.0(1)M6a',
  '15.0(1)XA2',
  '15.0(1)XA4',
  '15.0(1)XA1',
  '15.0(1)XA3',
  '15.0(1)XA',
  '15.0(1)XA5',
  '15.1(2)T',
  '15.1(1)T4',
  '15.1(3)T2',
  '15.1(1)T1',
  '15.1(2)T0a',
  '15.1(3)T3',
  '15.1(1)T3',
  '15.1(2)T3',
  '15.1(2)T4',
  '15.1(1)T2',
  '15.1(3)T',
  '15.1(2)T2a',
  '15.1(3)T1',
  '15.1(1)T',
  '15.1(2)T2',
  '15.1(2)T1',
  '15.1(2)T5',
  '15.1(3)T4',
  '15.1(1)T5',
  '15.1(1)XB',
  '15.1(1)XB3',
  '15.1(1)XB1',
  '15.1(1)XB2',
  '15.1(4)XB4',
  '15.1(4)XB5',
  '15.1(4)XB6',
  '15.1(4)XB5a',
  '15.1(4)XB7',
  '15.1(4)XB8',
  '15.1(4)XB8a',
  '15.0(1)S2',
  '15.0(1)S1',
  '15.0(1)S',
  '15.0(1)S3a',
  '15.0(1)S4',
  '15.0(1)S5',
  '15.0(1)S4a',
  '15.0(1)S6',
  '12.4(21a)M1',
  '12.4(23b)M1',
  '12.4(5a)M0',
  '15.2(1)S',
  '15.2(2)S',
  '15.2(1)S1',
  '15.2(4)S',
  '15.2(1)S2',
  '15.2(2)S1',
  '15.2(2)S2',
  '15.2(4)S1',
  '15.2(4)S4',
  '15.2(4)S6',
  '15.2(4)S2',
  '15.2(4)S5',
  '15.2(4)S3a',
  '15.2(4)S4a',
  '15.2(4)S7',
  '15.2(4)S8',
  '15.3(1)T',
  '15.3(2)T',
  '15.3(1)T1',
  '15.3(1)T2',
  '15.3(1)T3',
  '15.3(1)T4',
  '15.3(2)T1',
  '15.3(2)T2',
  '15.3(2)T3',
  '15.3(2)T4',
  '12.4(20)MRB',
  '12.4(20)MRB1',
  '12.3(10a)M0',
  '12.3(9)M0',
  '12.3(9)M1',
  '15.1(2)S',
  '15.1(1)S',
  '15.1(1)S1',
  '15.1(3)S',
  '15.1(1)S2',
  '15.1(2)S1',
  '15.1(2)S2',
  '15.1(3)S1',
  '15.1(3)S0a',
  '15.1(3)S2',
  '15.1(3)S4',
  '15.1(3)S3',
  '15.1(3)S5',
  '15.1(3)S6',
  '15.1(3)S7',
  '12.2(15)ZS1',
  '12.2(15)ZS2',
  '12.2(15)ZS3',
  '12.2(15)ZS4',
  '12.2(15)ZS5',
  '15.1(4)M3',
  '15.1(4)M',
  '15.1(4)M1',
  '15.1(4)M2',
  '15.1(4)M6',
  '15.1(4)M5',
  '15.1(4)M4',
  '15.1(4)M0a',
  '15.1(4)M0b',
  '15.1(4)M7',
  '15.1(4)M3a',
  '15.1(4)M10',
  '15.1(4)M8',
  '15.1(4)M9',
  '15.1(2)GC',
  '15.1(2)GC1',
  '15.1(2)GC2',
  '15.1(4)GC',
  '15.1(4)GC1',
  '15.1(4)GC2',
  '15.2(4)M',
  '15.2(4)M1',
  '15.2(4)M2',
  '15.2(4)M4',
  '15.2(4)M3',
  '15.2(4)M5',
  '15.2(4)M8',
  '15.2(4)M10',
  '15.2(4)M7',
  '15.2(4)M6',
  '15.2(4)M9',
  '15.2(4)M6b',
  '15.2(4)M6a',
  '12.3(11)TO3',
  '15.2(1)GC',
  '15.2(1)GC1',
  '15.2(1)GC2',
  '15.2(2)GC',
  '15.2(3)GC',
  '15.2(3)GC1',
  '15.2(4)GC',
  '15.2(4)GC1',
  '15.2(4)GC2',
  '15.2(4)GC3',
  '15.3(1)S',
  '15.3(2)S',
  '15.3(3)S',
  '15.3(1)S2',
  '15.3(1)S1',
  '15.3(2)S2',
  '15.3(2)S1',
  '15.3(3)S1',
  '15.3(3)S2',
  '15.3(3)S3',
  '15.3(3)S6',
  '15.3(3)S4',
  '15.3(3)S5',
  '15.3(3)S2a',
  '15.3(3)S7',
  '15.3(3)S6a',
  '15.4(1)T',
  '15.4(2)T',
  '15.4(1)T2',
  '15.4(1)T1',
  '15.4(1)T3',
  '15.4(2)T1',
  '15.4(2)T3',
  '15.4(2)T2',
  '15.4(1)T4',
  '15.4(2)T4',
  '15.4(1)S',
  '15.4(3)S',
  '15.4(1)S1',
  '15.4(1)S2',
  '15.4(2)S1',
  '15.4(1)S3',
  '15.4(3)S1',
  '15.4(2)S2',
  '15.4(3)S2',
  '15.4(3)S3',
  '15.4(1)S4',
  '15.4(2)S3',
  '15.4(2)S4',
  '15.4(3)S4',
  '15.4(3)S5',
  '15.3(3)M',
  '15.3(3)M1',
  '15.3(3)M2',
  '15.3(3)M3',
  '15.3(3)M5',
  '15.3(3)M4',
  '15.3(3)M6',
  '15.3(3)M7',
  '15.2(2)SC',
  '15.2(2)SC1',
  '15.2(2)SC3',
  '15.2(2)SC4',
  '15.4(3)M',
  '15.4(3)M1',
  '15.4(3)M2',
  '15.4(3)M3',
  '15.4(3)M4',
  '15.4(3)M5',
  '15.2(4)JAZ1',
  '15.3(3)XB12',
  '15.4(1)CG',
  '15.4(1)CG1',
  '15.4(2)CG',
  '15.5(1)S',
  '15.5(2)S',
  '15.5(1)S1',
  '15.5(3)S',
  '15.5(1)S2',
  '15.5(1)S3',
  '15.5(2)S1',
  '15.5(2)S2',
  '15.5(3)S1',
  '15.5(2)S3',
  '15.5(3)S2',
  '15.5(3)S0a',
  '15.5(2)S4',
  '15.5(1)T',
  '15.5(1)T1',
  '15.5(2)T',
  '15.5(1)T2',
  '15.5(1)T3',
  '15.5(2)T1',
  '15.5(2)T2',
  '15.5(2)T3',
  '15.5(1)T4',
  '15.5(3)M',
  '15.5(3)M1',
  '15.5(3)M0a',
  '15.5(3)M2',
  '15.5(3)M2a',
  '15.3(3)JAA1',
  '15.6(1)S',
  '15.6(1)T',
  '15.6(1)T0a',
  '15.5(2)XB',
  '15.6(2)SP3b',
  '15.1(3)SVR'
);

workarounds = make_list(CISCO_WORKAROUNDS['h323']);
workaround_params = make_list();

reporting = make_array(
  'port'     , product_info['port'],
  'severity' , SECURITY_HOLE,
  'version'  , product_info['version'],
  'bug_id'   , 'CSCux04257',
  'cmds'     , make_list('show process cpu')
);

cisco::check_and_report(
    product_info:product_info,
    workarounds:workarounds,
    workaround_params:workaround_params,
    reporting:reporting,
    vuln_versions:version_list
    );