CVE-2015-8717

The dissectsdp function in epan/dissectors/packet-sdp.c in the SDP dissector in Wireshark 1.12.x before 1.12.9 does not prevent use of a negative media count, which allows remote attackers to cause a denial of service application crash via a crafted packet...

CVE-2015-8717: Improper Input Validation

The dissectsdp function in epan/dissectors/packet-sdp.c in the SDP dissector in Wireshark 1.12.x before 1.12.9 does not prevent use of a negative media count, which allows remote attackers to cause a denial of service application crash via a crafted packet...

PT-2016-3965

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.12.x through 1.12.8 Description The issue is related to the dissect sdp function in the SDP dissector, which does not prevent the use of a negative media count. This allows remote attackers to cause a denial of service,...

Asterisk SIP Invite Malformed SDP Denial of Service (CVE-2007-1561)

A denial of service vulnerability exists in the channel driver of Asterisk. A remote attacker may send a SIP INVITE message with an SDP containing one valid and one invalid IP address, causing the server to crash...

Design/Logic Flaw

Cisco TelePresence Video Communication Server VCS X8.5RC4 allows remote attackers to cause a denial of service CPU consumption or device outage via a crafted SDP parameter-negotiation request in an SDP session during a SIP connection, aka Bug ID CSCut42422...

CVE-2015-0772

Cisco TelePresence Video Communication Server VCS X8.5RC4 allows remote attackers to cause a denial of service CPU consumption or device outage via a crafted SDP parameter-negotiation request in an SDP session during a SIP connection, aka Bug ID CSCut42422...

CVE-2015-0772

CVE-2015-0772 affects Cisco TelePresence Video Communication Server (VCS) X8.5RC4. The vulnerability is in the SDP parser during SDP parameter negotiation over SIP, caused by a parsing error in the SDP handling code. An unauthenticated, remote attacker can send a crafted SDP session parameter neg...

CVE-2015-0772: Undefined Security Weakness

Cisco TelePresence Video Communication Server VCS X8.5RC4 allows remote attackers to cause a denial of service CPU consumption or device outage via a crafted SDP parameter-negotiation request in an SDP session during a SIP connection, aka Bug ID CSCut42422...

Cisco TelePresence Video Communication Server SDP Over SIP Denial of Service Vulnerability

A vulnerability in the Session Description Protocol SDP parser of the Cisco TelePresence Video Communication Server VCS could allow an unauthenticated, remote attacker to cause the Cisco VCS device to become unreachable due to a denial of service DoS attack caused by high CPU utilization. The...

Cisco TelePresence Conductor SDP Media Description Vulnerability

According to its self-reported version number, the Cisco TelePresence Conductor on the remote host contains an vulnerability related to the Session Description Protocol SDP packet handler function. A remote, unauthenticated attacker, using a crafted SDP packet to trigger a reload, can exploit thi...

Cisco TelePresence VCS / Expressway Series < 8.2 SDP Media Description Vulnerability

According to the self-reported version, the Cisco TelePresence VCS or Expressway Series on the remote host contains an vulnerability related to the Session Description Protocol SDP packet handler function. A remote, unauthenticated attacker, using a crafted SDP packet to trigger a reload, can...

CVE-2015-0652

The Session Description Protocol SDP implementation in Cisco TelePresence Video Communication Server VCS and Cisco Expressway before X8.2 and Cisco TelePresence Conductor before XC2.4 allows remote attackers to cause a denial of service mishandled exception and device reload via a crafted media...

Session fixation

The Session Description Protocol SDP implementation in Cisco TelePresence Video Communication Server VCS and Cisco Expressway before X8.2 and Cisco TelePresence Conductor before XC2.4 allows remote attackers to cause a denial of service mishandled exception and device reload via a crafted media...

CVE-2015-0652

CVE-2015-0652 affects Cisco TelePresence VCS, Cisco Expressway (before X8.2) and Cisco TelePresence Conductor (before XC2.4). The SDP packet handler vulnerability allows a remote, unauthenticated attacker to cause a denial of service (mishandled exception and device reload) via a crafted SDP medi...

CVE-2015-0652

The Session Description Protocol SDP implementation in Cisco TelePresence Video Communication Server VCS and Cisco Expressway before X8.2 and Cisco TelePresence Conductor before XC2.4 allows remote attackers to cause a denial of service mishandled exception and device reload via a crafted media...

CVE-2015-0652: Improper Input Validation

The Session Description Protocol SDP implementation in Cisco TelePresence Video Communication Server VCS and Cisco Expressway before X8.2 and Cisco TelePresence Conductor before XC2.4 allows remote attackers to cause a denial of service mishandled exception and device reload via a crafted media...

Multiple Vulnerabilities in Cisco TelePresence Video Communication Server, Cisco Expressway, and Cisco TelePresence Conductor

Cisco TelePresence Video Communication Server VCS, Cisco Expressway and Cisco TelePresence Conductor contain the following vulnerabilities: SDP Media Description Denial of Service Vulnerability Authentication Bypass Vulnerability Successful exploitation of the SDP Media Description Denial of...

DEBIAN-CVE-2015-1558

Asterisk Open Source 12.x before 12.8.1 and 13.x before 13.1.1, when using the PJSIP channel driver, does not properly reclaim RTP ports, which allows remote authenticated users to cause a denial of service file descriptor consumption via an SDP offer containing only incompatible codecs...

Code injection

Asterisk Open Source 12.x before 12.8.1 and 13.x before 13.1.1, when using the PJSIP channel driver, does not properly reclaim RTP ports, which allows remote authenticated users to cause a denial of service file descriptor consumption via an SDP offer containing only incompatible codecs...

CVE-2015-1558

Asterisk Open Source 12.x before 12.8.1 and 13.x before 13.1.1, when using the PJSIP channel driver, does not properly reclaim RTP ports, which allows remote authenticated users to cause a denial of service file descriptor consumption via an SDP offer containing only incompatible codecs...