PT-2019-3316 · Cisco · Cisco Ios Xe

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software affected versions not specified Description: A vulnerability in the Network Address Translation NAT Session Initiation Protocol SIP Application Layer Gateway ALG could allow an unauthenticated, remote attacker to cause a...

PT-2019-3321 · Cisco · Cisco Ios +1

Name of the Vulnerable Software and Affected Versions: Cisco IOS and IOS XE Software affected versions not specified Description: A vulnerability in the common Session Initiation Protocol SIP library could allow an unauthenticated, remote attacker to trigger a reload of an affected device,...

The vulnerability of the microprogrammed software in Cisco IP Phone models series 8800 and 7800, related to insufficient checking of SIP initiation packets, allows attackers to cause service failures.

The vulnerability of the microprogrammed software in Cisco IP Phone models series 8800 and 7800 is related to insufficient checking of incoming packets of the Session Initiation Protocol SIP. Exploiting this vulnerability can allow a malicious actor to cause service failures...

UBUNTU-CVE-2019-13161

An issue was discovered in Asterisk Open Source through 13.27.0, 14.x and 15.x through 15.7.2, and 16.x through 16.4.0, and Certified Asterisk through 13.21-cert3. A pointer dereference in chansip while handling SDP negotiation allows an attacker to crash Asterisk when handling an SDP answer to a...

CVE-2019-1887

A vulnerability in the Session Initiation Protocol SIP protocol implementation of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to insufficient validation of input SIP traffic. An attacker...

CVE-2019-1922

A vulnerability in Cisco SIP IP Phone Software for Cisco IP Phone 7800 Series and 8800 Series could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected phone. The vulnerability is due to insufficient validation of input Session Initiation Protocol S...

Input validation

A vulnerability in Cisco SIP IP Phone Software for Cisco IP Phone 7800 Series and 8800 Series could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected phone. The vulnerability is due to insufficient validation of input Session Initiation Protocol S...

Cisco Unified Communications Manager Buffer Overflow Vulnerability (CNVD-2019-21308)

Cisco Unified Communications Manager CUCM, Unified CM, CallManager is a call-processing component of a unified communications system from Cisco. The component provides a scalable, distributable and highly available enterprise IP telephony call processing solution. A buffer error vulnerability...

The vulnerability of the call processing function in Cisco IP Phone models 7800 and 8800 allows a intruder to cause a service failure.

The vulnerability of the call processing function in Cisco IP Phone models 7800 and 8800 is related to resource management errors. Exploiting this vulnerability allows a malicious actor to cause service failure by sending a specially crafted SIP packet to the vulnerable phone...

The vulnerability of the microprogramming software of the Cisco TelePresence Video Communication Server and the Cisco Expressway software lies in the lack of proper input data validation. This allows a perpetrator to trigger a service failure.

The vulnerability of the Microprogramming Software of the Cisco TelePresence Video Communication Server and the Cisco Expressway software exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending SIP message...

CVE-2019-1721

A vulnerability in the phone book feature of Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS could allow an authenticated, remote attacker to cause the CPU to increase to 100% utilization, causing a denial of service DoS condition on an affected system. The...

The vulnerability of the Session Initiation Protocol implementation in the microcomputer-based software of Cisco Small Business SPA514G devices allows a attacker to induce a service failure.

The vulnerability of the Session Initiation Protocol SIP implementation in Cisco Small Business SPA514G IP-telephone software is related to resource management errors. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending specially crafted SIP messages...

CVE-2019-1765

A vulnerability in the web-based management interface of Session Initiation Protocol SIP Software for Cisco IP Phone 8800 Series could allow an authenticated, remote attacker to write arbitrary files to the filesystem. The vulnerability is due to insufficient input validation and file-level...

CVE-2019-1766

A vulnerability in the web-based management interface of Session Initiation Protocol SIP Software for Cisco IP Phone 8800 Series could allow an unauthenticated, remote attacker to cause high disk utilization, resulting in a denial of service DoS condition. The vulnerability exists because the...

CVE-2019-1764

A vulnerability in the web-based management interface of Session Initiation Protocol SIP Software for Cisco IP Phone 8800 Series could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack. The vulnerability is due to insufficient CSRF protections for the...

PT-2019-1500 · Cisco · Cisco Small Business Spa5X5 Series Ip Phones +3

Name of the Vulnerable Software and Affected Versions: Cisco Small Business SPA112 Series IP Phones version 1.4.2 Cisco Small Business SPA525 Series IP Phones version 7.6.2 Cisco Small Business SPA5X5 Series IP Phones version 7.6.2 Cisco Small Business SPA500 Series IP Phones version 1.4.2...

CVE-2019-1676 Cisco Meeting Server SIP Processing Denial of Service Vulnerability

A vulnerability in the Session Initiation Protocol SIP call processing of Cisco Meeting Server CMS software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition of the Cisco Meeting Server. The vulnerability is due to insufficient validation of Session...

Cisco Meeting Server SIP Processing Denial of Service Vulnerability

A vulnerability in the Session Initiation Protocol SIP call processing of Cisco Meeting Server CMS software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition of the Cisco Meeting Server. The vulnerability is due to insufficient validation of Session...

The vulnerability of the NAT mechanism in the Cisco IOS XE operating system, which allows a hacker to trigger a service failure.

The vulnerability of the Cisco IOS XE operating system’s NAT mechanism is related to errors in processing SIP packets. Exploiting this vulnerability allows a malicious actor to trigger a device reboot and a service failure by sending specially crafted SIP packets to port 5060...

The vulnerability of the SIP Application-level Gateway (ALG) component of the JunOS operating system, which allows a attacker to trigger a service failure.

The vulnerability of the SIP Application-level Gateway ALG component of the JunOS operating system is related to resource release errors. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...