Cisco IP Phone 8851 Session Initiation Protocol DoS Vulnerability (cisco-sa-20170517-sip)

A vulnerability in the Session Initiation Protocol SIP implementation of Cisco IP Phone 8851 could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, a...

CVE-2017-3808

A vulnerability in the Session Initiation Protocol SIP UDP throttling process of Cisco Unified Communications Manager Cisco Unified CM could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient rate...

Cisco Unified Communications Manager UDP Handling Denial of Service Vulnerability

Cisco Unified Communications Manager is an enterprise-class IP telephony call processing system. Cisco Unified Communications Manager has a security vulnerability in the Session Initiation Protocol SIP UDP throttling process, which could be exploited by a remote attacker to submit a special reque...

DEBIAN-CVE-2017-7853

In libosip2 in GNU oSIP 4.1.0 and 5.0.0, a malformed SIP message can lead to a heap buffer overflow in the msgosipbodyparse function defined in osipparser2/osipmessageparse.c, resulting in a remote DoS...

CVE-2016-2960

IBM WebSphere Application Server WAS 7.x before 7.0.0.43, 8.0.0.x before 8.0.0.13, 8.5.0.x before 8.5.5.10, 8.5.0.x and 16.0.0.x Liberty before Liberty Fix Pack 16.0.0.3, and 9.0.0.x before 9.0.0.1 allows remote attackers to cause a denial of service via crafted SIP messages...

IBM WebSphere Application Server Denial of Service Vulnerability (CNVD-2016-05996)

IBM WebSphere Application Server WAS is an application server product developed and distributed by IBM in the U.S. It is a platform for Java EE and Web services applications, and is the foundation of the IBM WebSphere software platform. IBM WebSphere Application Server suffers from a denial of...

The vulnerability of Cisco PIX software allows a malicious individual to trigger a service failure.

The vulnerability in the implementation of the SIP protocol in Cisco products including IP phones, IOS, and Secure PIX allows malicious actors to trigger service failures and execute arbitrary codes by using specially crafted INVITE messages...

The vulnerability of Cisco ASA software allows a malicious actor to induce a service failure.

The vulnerability in the SIP control engine of Cisco’s multifunctional security devices ASA allows malicious actors to remotely trigger service failures—such as excessive memory consumption or device reboots—by using specially crafted SIP packets...

The vulnerability of the Cisco IOS operating system, which allows a malicious actor to trigger a service failure

Cisco IOS software contains numerous implementation errors in the Session Initiation Protocol SIP. When these errors are exploited during operation, a fault with ID CSCth03022 can be triggered, along with a “service failure” of the router...

The vulnerability of the Cisco IOS operating system, which allows a malicious actor to trigger a service failure

The Network Address Translation NAT service of Cisco IOS software contains a vulnerability that allows a remote attacker to trigger a “service denial” by sending specially crafted SIP packets...

The vulnerability of the Cisco IOS operating system, which allows a malicious actor to trigger a “disconnection”

Cisco IOS software contains a vulnerability in the NAT service, which allows a remote attacker to cause a router to generate a “service failure” by manipulating IP and SIP packets...

CVE-2016-1400

Cisco TelePresence Video Communications Server VCS X8.x before X8.7.2 allows remote attackers to cause a denial of service service disruption via a crafted URI in a SIP header, aka Bug ID CSCuy43258...

The vulnerability of the Cisco IOS operating system, which allows a intruder to trigger a service failure

The vulnerability of the Cisco IOS operating system is related to resource management errors. Exploiting this vulnerability allows a malicious actor to trigger a service failure device reboot through modified SIP messages...

UBUNTU-CVE-2016-2385

Heap-based buffer overflow in the encodemsg function in encodemsg.c in the SEAS module in Kamailio formerly OpenSER and SER before 4.3.5 allows remote attackers to cause a denial of service memory corruption and process crash or possibly execute arbitrary code via a large SIP packet...

Cisco Unified Communications Manager Software Session Initiation Protocol Memory Leak Vulnerability (cisco-sa-20160323-sip)

A vulnerability in the Session Initiation Protocol SIP gateway implementation in Cisco Unified Communications Manager Software could allow an unauthenticated, remote attacker to cause a memory leak and eventual reload of an affected device. Copyright C 2016 Greenbone Networks GmbH Some text...

The vulnerability of the microprogramming software of the Cisco TelePresence Video Communication Server allows a intruder to trigger a service failure.

The vulnerability of the microprogramming software of the Cisco TelePresence Video Communication Server exists due to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause a service failure disabling VoIP services by usi...

kamailio SIP Proxy Buffer Overflow Vulnerability

kamailio is an open source GPL-based SIP Session Initiation Protocol, Session Initiation Protocol server developed by the FhG FOKUS Institute in Germany . A buffer overflow vulnerability exists in kamailio's SIP proxy. An attacker can exploit this vulnerability to execute arbitrary code...

Cisco Releases Security Updates

Cisco has released security updates to address vulnerabilities in multiple products. Exploitation of these vulnerabilities could allow a remote attacker to create a denial-of-service condition. US-CERT encourages users and administrators to review the following Cisco Security Advisories and apply...

CVE-2016-1338

Cisco TelePresence Video Communication Server VCS X8.5.1 and X8.5.2 allows remote authenticated users to cause a denial of service VoIP outage via a crafted SIP message, aka Bug ID CSCuu43026...

UBUNTU-CVE-2016-2316

chansip in Asterisk Open Source 1.8.x, 11.x before 11.21.1, 12.x, and 13.x before 13.7.1 and Certified Asterisk 1.8.28, 11.6 before 11.6-cert12, and 13.1 before 13.1-cert3, when the timert1 sip.conf configuration is set to a value greater than 1245, allows remote attackers to cause a denial of...