Cisco Security Advisory: Cisco IOS Software Network Address Translation Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco IOS Software Network Address Translation Vulnerabilities Advisory ID: cisco-sa-20100922-nat http://www.cisco.com/warp/public/707/cisco-sa-20100922-nat.shtml Revision 1.0 For Public Release 2010 September 22 1600 UTC GMT ...

Cisco IOS multiple security vulnerabilities

DoS via SIP, DoS via ICGMP, SSL information leak, DoS in voice protocols application layer gateway for NAT...

CVE-2010-2831

Unspecified vulnerability in the NAT for SIP implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1 allows remote attackers to cause a denial of service device reload via transit traffic on UDP port 5060, aka Bug ID CSCtf17624...

CVE-2010-2832

Unspecified vulnerability in the NAT for H.323 implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1 allows remote attackers to cause a denial of service device reload via transit traffic, aka Bug ID CSCtf91428...

CVE-2010-2833

Unspecified vulnerability in the NAT for H.225.0 implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1 allows remote attackers to cause a denial of service device reload via transit traffic, aka Bug ID CSCtd86472...

Code injection

Unspecified vulnerability in the NAT for SIP implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1 allows remote attackers to cause a denial of service device reload via transit traffic on UDP port 5060, aka Bug ID CSCtf17624...

Code injection

Unspecified vulnerability in the NAT for H.225.0 implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1 allows remote attackers to cause a denial of service device reload via transit traffic, aka Bug ID CSCtd86472...

Code injection

Unspecified vulnerability in the NAT for H.323 implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1 allows remote attackers to cause a denial of service device reload via transit traffic, aka Bug ID CSCtf91428...

CVE-2010-2832

Unspecified vulnerability in the NAT for H.323 implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1 allows remote attackers to cause a denial of service device reload via transit traffic, aka Bug ID CSCtf91428...

CVE-2010-2831

Unspecified vulnerability in the NAT for SIP implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1 allows remote attackers to cause a denial of service device reload via transit traffic on UDP port 5060, aka Bug ID CSCtf17624...

CVE-2010-2832

Cisco IOS NAT for H.323 DoS (CVE-2010-2832) affects IOS releases 12.1–12.4 and 15.0–15.1. The vulnerability allows remote attackers to trigger a device reload via transit traffic, as part of the NAT processing for H.323. The Cisco advisory CSCtf91428 assigns this CVE and notes the impact is a den...

CVE-2010-2831

CVE-2010-2831 concerns Cisco IOS NAT for SIP DoS vulnerability. The NAT for SIP feature on Cisco IOS 12.1–12.4 and 15.0–15.1 can cause a device reload (DoS) when processing transit UDP SIP traffic on port 5060 (Bug CSCtf17624). Documents in the Cisco advisory indicate separate NAT DoS issues for ...

CVE-2010-2833

Unspecified vulnerability in the NAT for H.225.0 implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1 allows remote attackers to cause a denial of service device reload via transit traffic, aka Bug ID CSCtd86472...

Cisco Releases Security Advisories

Cisco has released six security advisories to address vulnerabilities affecting the Cisco IOS Software and the Cisco Unified Communications Manager. Exploitation of these vulnerabilities may allow an attacker to cause a denial-of-service condition. US-CERT encourages users and administrators to...

Cisco IOS Software NAT Skinny Call Control Protocol Vulnerability (cisco-sa-20100324-sccp)

Skinny Client Control Protocol SCCP crafted messages may cause a Cisco IOS device that is configured with the Network Address Translation NAT SCCP Fragmentation Support feature to reload. Cisco has released free software updates that address this vulnerability. A workaround that mitigates this...

Vulnerabilities in H.323 Message Processing - Cisco Systems

Multiple Cisco products contain vulnerabilities in the processing of H.323 messages, which are typically used in Voice over Internet Protocol VoIP or multimedia applications. A test suite has been developed by the University of Oulu to target this protocol and identify vulnerabilities. Support fo...

Cisco IOS NAT Skinny Call Control Protocol Vulnerability

A series of segmented Skinny Call Control Protocol SCCP messages may cause a Cisco IOS device that is configured with the Network Address Translation NAT SCCP Fragmentation Support feature to reload. Cisco has released free software updates that address this vulnerability. A workaround that...

Cisco IOS cTCP Denial of Service Vulnerability - Cisco Systems

A series of TCP packets may cause a denial of service DoS condition on Cisco IOS devices that are configured as Easy VPN servers with the Cisco Tunneling Control Protocol cTCP encapsulation feature. Cisco has released free software updates that address this vulnerability. No workarounds are...

Cisco IOS Software Input Access List Leakage with NAT - Cisco Systems

A group of related software bugs bug IDs given under "Software Versions and Fixes" create an undesired interaction between network address translation NAT and input access list processing in certain Cisco routers running 12.0-based versions of Cisco IOS software including 12.0, 12.0S, and 12.0T, ...

libvirt security and bug fix update

0.6.3-33.0.1.el55.3 - Replaced docs/et.png in tarball 0.6.3-33.el55.3 - Explicitly set qcow2 backing store format CVE-2010-2239 - Remap privileged source ports from guests behind NAT CVE-2010-2242 - Eliminate memory leak in xenUnifiedDomainInfoListFree rhbz 619711 0.6.3-33.el55.2 - Fix discrepanc...