521 matches found
4G VoLTE the presence of the vulnerability can cause the phone user's location and other personal information disclosure-vulnerability warning-the black bar safety net
! In recent years, 4G VoLTE in the global field of mobile communications is increasingly popular popular, has now become the most European Region and Asian countries of the trend. And recently, the French security company P1 security by reporting a detailed list of a long string on 4G VoLTE call...
Cisco TelePresence Endpoint SIP INVITE Packet Flood DoS (cisco-sa-20170607-tele)
The remote host either is running Cisco TelePresence Codec TC that is version 7.2.x prior to 7.3.8 or is running Cisco Collaboration Endpoint CE software that is version 8.x prior 8.3.0. It is, therefore, affected by a denial of service vulnerability in the Session Initiation Protocol SIP due to ...
[SECURITY] [DSA 3879-1] libosip2 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3879-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 13, 2017 https://www.debian.org/security/faq -...
CVE-2017-6656
A vulnerability in Session Initiation Protocol SIP call handling of Cisco IP Phone 8800 Series devices could allow an unauthenticated, remote attacker to cause a denial of service DoS condition due to the SIP process unexpectedly restarting. All active phone calls are dropped as the SIP process...
Design/Logic Flaw
A vulnerability in Session Initiation Protocol SIP call handling of Cisco IP Phone 8800 Series devices could allow an unauthenticated, remote attacker to cause a denial of service DoS condition due to the SIP process unexpectedly restarting. All active phone calls are dropped as the SIP process...
Cisco IP Phone 8800 Series Denial of Service Vulnerability
Cisco IP Phone 8800 Series is a telephone product from Cisco USA that provides video and VoIP communication features. A denial of service vulnerability exists in the Session Initiation Protocol SIP call handling in the Cisco IP Phone 8800 Series, which arises from the program's failure to properl...
CVE-2017-6648
A vulnerability in the Session Initiation Protocol SIP of the Cisco TelePresence Codec TC and Collaboration Endpoint CE Software could allow an unauthenticated, remote attacker to cause a TelePresence endpoint to reload unexpectedly, resulting in a denial of service DoS condition. The vulnerabili...
Cisco IP Phone 8800 Series SIP Denial of Service Vulnerability
A vulnerability in Session Initiation Protocol SIP call handling of Cisco IP Phone 8800 Series devices could allow an unauthenticated, remote attacker to cause a denial of service DoS condition due to the SIP process unexpectedly restarting. All active phone calls are dropped as the SIP process...
Cisco IP Phone 8851 Denial of Service Vulnerability
Cisco IP Phone 8851 is a telephone product from Cisco USA that provides video and VoIP communication features. A denial of service vulnerability exists in the Session Initiation Protocol SIP implementation in the Cisco IP Phone 8851 version 11.00.1. A remote attacker could exploit this...
CVE-2017-6630
A vulnerability in the Session Initiation Protocol SIP implementation of Cisco IP Phone 8851 11.00.1 could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to an abnormal SIP message. An attacker could exploit this vulnerability by...
Cisco IP Phone 8851 Session Initiation Protocol DoS Vulnerability (cisco-sa-20170517-sip)
A vulnerability in the Session Initiation Protocol SIP implementation of Cisco IP Phone 8851 could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, a...
GNU oSIP libosip2 Denial of Service Vulnerability (CNVD-2017-07201)
GNU oSIP is a library developed by the GNU Project to provide developers with an interface to multimedia and communications. libosip2 is a standard library for multithreading safety written in C. It is a library that is used in the GNU Project. A denial of service vulnerability exists in the...
The vulnerability of the UDP service in the Microsoft Windows operating system allows a perpetrator to cause a service failure and a device restart.
The vulnerability of the UDP service in the Microsoft Windows operating system is related to insufficient data processing speed. Exploiting this vulnerability can allow a malicious actor to cause service failure and forced restarts of devices through specially crafted SIP messages...
CVE-2017-3808
A vulnerability in the Session Initiation Protocol SIP UDP throttling process of Cisco Unified Communications Manager Cisco Unified CM could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient rate...
Cisco Unified Communications Manager UDP Handling Denial of Service Vulnerability
Cisco Unified Communications Manager is an enterprise-class IP telephony call processing system. Cisco Unified Communications Manager has a security vulnerability in the Session Initiation Protocol SIP UDP throttling process, which could be exploited by a remote attacker to submit a special reque...
DEBIAN-CVE-2017-7853
In libosip2 in GNU oSIP 4.1.0 and 5.0.0, a malformed SIP message can lead to a heap buffer overflow in the msgosipbodyparse function defined in osipparser2/osipmessageparse.c, resulting in a remote DoS...
CVE-2016-2960
IBM WebSphere Application Server WAS 7.x before 7.0.0.43, 8.0.0.x before 8.0.0.13, 8.5.0.x before 8.5.5.10, 8.5.0.x and 16.0.0.x Liberty before Liberty Fix Pack 16.0.0.3, and 9.0.0.x before 9.0.0.1 allows remote attackers to cause a denial of service via crafted SIP messages...
IBM WebSphere Application Server Denial of Service Vulnerability (CNVD-2016-05996)
IBM WebSphere Application Server WAS is an application server product developed and distributed by IBM in the U.S. It is a platform for Java EE and Web services applications, and is the foundation of the IBM WebSphere software platform. IBM WebSphere Application Server suffers from a denial of...
The vulnerability of Cisco ASA software allows a malicious actor to induce a service failure.
The vulnerability in the SIP control engine of Cisco’s multifunctional security devices ASA allows malicious actors to remotely trigger service failures—such as excessive memory consumption or device reboots—by using specially crafted SIP packets...
The vulnerability of Cisco PIX software allows a malicious individual to trigger a service failure.
The vulnerability in the implementation of the SIP protocol in Cisco products including IP phones, IOS, and Secure PIX allows malicious actors to trigger service failures and execute arbitrary codes by using specially crafted INVITE messages...