CVE-2015-0614

The Connection Conversation Manager aka CuCsMgr process in Cisco Unity Connection 8.5 before 8.51SU7, 8.6 before 8.62aSU4, 9.x before 9.12SU2, and 10.0 before 10.01SU1, when SIP trunk integration is enabled, allows remote attackers to cause a denial of service core dump and restart via crafted SI...

CVE-2015-0615

The call-handling implementation in Cisco Unity Connection 8.5 before 8.51SU7, 8.6 before 8.62aSU4, 9.x before 9.12SU2, and 10.0 before 10.01SU1, when SIP trunk integration is enabled, allows remote attackers to cause a denial of service port consumption by improperly terminating SIP sessions, ak...

CVE-2015-0616

The Connection Conversation Manager aka CuCsMgr process in Cisco Unity Connection 8.5 before 8.51SU7, 8.6 before 8.62aSU4, and 9.x before 9.12SU2, when SIP trunk integration is enabled, allows remote attackers to cause a denial of service core dump and restart by improperly terminating SIP TCP...

CVE-2015-0616

CVE-2015-0616 affects Cisco Unity Connection’s Connection Conversation Manager (CuCsMgr) when SIP trunk integration is enabled. The vulnerability allows an unauthenticated, remote attacker to cause a denial of service (core dump and restart) by improperly terminating SIP TCP connections. Affected...

CVE-2015-0612

Cisco Unity Connection is affected by CVE-2015-0612 (CuCsMgr DoS) when SIP trunk integration is enabled. Affected are 8.5 before 8.5(1)SU6, 8.6 before 8.6(2a)SU4, and 9.x before 9.1(2)SU2 (and 10.x prior to 10.0(1)SU1 per Nessus plugin). The issue arises from CuCsMgr’s improper handling of specif...

CVE-2015-0613

The Connection Conversation Manager aka CuCsMgr process in Cisco Unity Connection 8.5 before 8.51SU7, 8.6 before 8.62aSU4, 9.x before 9.12SU2, and 10.0 before 10.01SU1, when SIP trunk integration is enabled, allows remote attackers to cause a denial of service core dump and restart via crafted SI...

CVE-2015-0613

CVE-2015-0613 affects Cisco Unity Connection CuCsMgr: vulnerability arises when SIP trunk integration is enabled, allowing unauthenticated remote attackers to trigger a DoS (core dump and restart) by sending crafted SIP INVITE messages. Affected software includes Unity Connection 8.5 before 8.5(1...

CVE-2015-0615

CVE-2015-0615 affects Cisco Unity Connection; DoS via SIP call handling when SIP trunk integration is enabled. Affected versions: 8.5 (before 8.5(1)SU7), 8.6 (before 8.6(2a)SU4), 9.x (before 9.1(2)SU2), 10.0 (before 10.0(1)SU1). Root cause: SIP session termination can fail to release resources, l...

CVE-2015-0614

CVE-2015-0614 affects Cisco Unity Connection CuCsMgr and is triggered when SIP trunk integration is enabled. The vulnerability allows unauthenticated remote attackers to cause a denial of service (core dump and restart) by sending crafted SIP INVITE messages to affected versions (8.5 < 8.5(1)S...

KLA10532 Denial of service vulnerabilities in Cisco Unity Connection

An unspecified vulnerabilities were found in Cisco Unity Connector. By exploiting these vulnerabilities malicious users can cause denial of service. These vulnerabilities can be exploited remotely via SIP messages, sessions and connections manipulation. Original advisories Cisco advisory Related...

Multiple Vulnerabilities in Cisco Unity Connection

Cisco Unity Connection contains multiple vulnerabilities, when it is configured with Session Initiation Protocol SIP trunk integration. The vulnerabilities described in this advisory are denial of service vulnerabilities impacting the availability of Cisco Unity Connection for processing SIP...

Cisco Small Business IP phones SPA 300 and SPA 500 Information Disclosure Vulnerabilities

Cisco Small Business IP phones SPA 300 and SPA 500 are the SPA 300 and SPA 500 series of IP VoIP products from Cisco. A security vulnerability exists in the default configuration of Cisco Small Business IP phones SPA 300 version 7.5.5 and SPA 500 version 7.5.5. Because the program fails to set up...

Digium Asterisk Open Source Resource Management Error Vulnerability

Digium Asterisk Open Source is an open source telephone exchange PBX system software from Digium. The software supports voicemail, multi-party voice conferencing, interactive voice response IVR and so on. A security vulnerability exists in Digium Asterisk Open Source versions 12.x prior to 12.8.1...

An Open Source SIP Sniffer: pcapsipdump

An open-source libpcap-based SIP sniffer with per-call sorting capabilities. Listens on a network interface and saves SIP/RTP sessions to files. Each session goes in a separate, fancy-named .pcap file. Those could be opened with tcpdump, wireshark and friends. SIP/RTP sessions are written to disk...

Asterisk chan_pjsip Incompatible Codecs DoS (AST-2015-001)

According to its SIP banner, the version of Asterisk running on the remote host has a flaw in which it fails to reclaim allocated RTP ports whenever a connection is made to an authenticated endpoint whose SPD offers only codecs that are not allowed by Asterisk. An attacker could exploit this...

Multiple Asterisk Product 'Channels/chan_pjsip' Denial of Service Vulnerabilities

Asterisk is an open source software PBX that supports a variety of VoIP protocols and devices. A denial of service vulnerability exists in multiple Asterisk products 'Channels/chanpjsip', which could be exploited by an attacker to submit a special request to crash an application or launch a denia...

Oracle Solaris Third-Party Patch Update : wireshark (multiple_vulnerabilities_in_wireshark9)

The remote Solaris system is missing necessary patches to address security updates : - The dissectsipcommon function in epan/dissectors/packet-sip.c in the SIP dissector in Wireshark 1.8.x before 1.8.12 and 1.10.x before 1.10.4 does not check for empty lines, which allows remote attackers to caus...

Oracle Solaris Third-Party Patch Update : wireshark (multiple_vulnerabilities_in_wireshark8)

The remote Solaris system is missing necessary patches to address security updates : - The ieee802154maprec function in epan/dissectors/packet-ieee802154.c in the IEEE 802.15.4 dissector in Wireshark 1.8.x before 1.8.11 and 1.10.x before 1.10.3 uses an incorrect pointer chain, which allows remote...

Cisco TelePresence VCS and Expressway High CPU Utilization Vulnerability

A vulnerability in the SIP code of Cisco TelePresence Video Communication Server VCS and Cisco Expressway could allow an unauthenticated, remote attacker to cause high memory consumption and CPU utilization, which could cause some services to become unavailable and degrade performance. The...

CVE-2015-0579

Cisco TelePresence Video Communication Server VCS and Cisco Expressway allow remote attackers to cause a denial of service memory and CPU consumption, and partial outage via crafted SIP packets, aka Bug ID CSCur12473...