Rockwell Automation Stratix Cisco IOS and IOS XE Software H.323 Message Validation Denial of Service (CVE-2016-6384)

A vulnerability in the H.323 subsystem of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to create a denial of service DoS condition on an affected device. The vulnerability is due to a failure to properly validate certain fields in an H.323 protocol suite message...

CVE-2016-6384

CVE-2016-6384 affects Cisco IOS/IOS XE H.323 Message Validation DoS. Cisco reports that Cisco IOS 12.2–12.4, 15.0–15.6, and IOS XE 3.1–3.17, plus 16.2, are vulnerable when processing crafted H.323 fields, potentially causing a device reload/crash. Connected sources confirm the root cause as impro...