Multiple Huawei products cross-border read vulnerability (CNVD-2018-02555)

Huawei AR series routers, SRG series routing gateways, NetEngine16EX, and other products from Huawei China. The out-of-bounds read vulnerability exists in multiple Huawei products and is due to the device failing to adequately validate input. A remote attacker could exploit this vulnerability by...

CVE-2018-0086

A vulnerability in the application server of the Cisco Unified Customer Voice Portal CVP could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on the affected device. The vulnerability is due to malformed SIP INVITE traffic received on the CVP during...

Cisco Unified Customer Voice Portal Denial of Service Vulnerability

Cisco Unified Customer Voice Portal CVP can be used as a standalone interactive voice response IVR system or integrated with a contact center. A denial of service vulnerability exists in Cisco Unified Customer Voice Portal CVP. A remote user can exploit this vulnerability to affect the availabili...

DEBIAN-CVE-2017-17850

An issue was discovered in Asterisk 13.18.4 and older, 14.7.4 and older, 15.1.4 and older, and 13.18-cert1 and older. A select set of SIP messages create a dialog in Asterisk. Those SIP messages must contain a contact header. For those messages, if the header was not present and the PJSIP channel...

Digium Asterisk PJSIP Channel Driver Denial of Service Vulnerability

Digium Asterisk is a set of open source telephone exchange PBX system software from Digium, Inc. in the United States. The software supports voicemail, multi-party voice conferencing, interactive voice response IVR, etc. PJSIP Channel Driver is one of the PJSIP drivers. A security vulnerability...

Buffer overflow vulnerability in multiple Huawei products (CNVD-2017-37731)

Huawei AR120-S and others are router products from Huawei China. A buffer overflow vulnerability exists in multiple Huawei products due to a program failing to adequately validate some values in a message. A remote attacker could exploit this vulnerability by sending specially crafted SIP message...

Memory leak vulnerability in multiple Huawei products (CNVD-2017-37729)

Huawei AR120-S and others are router products from Huawei China. A buffer overflow vulnerability exists in multiple Huawei products due to a program failing to adequately validate some values in a message. A remote attacker could exploit this vulnerability by sending specially crafted SIP message...

SIP module cache overflow vulnerability in multiple Huawei products (CNVD-2017-38455)

Huawei DP300, RP200, RSE6500, TE30/40/50/60 are all products of Huawei China. A cache overflow vulnerability exists in the SIP module of multiple Huawei products, which is due to the device failing to adequately validate some of the values in SIP messages. An unauthenticated, remote attacker coul...

Cisco IP Phone 8800 Series Device Denial of Service Vulnerability

The Cisco IP Phone 8800 Series devices is an IP phone from Cisco that provides video and VoIP communication features.Session Initiation Protocol SIP is a session initiation protocol used in... A denial of service vulnerability exists in the handling of Session Initiation Protocol SIP calls in Cis...

Buffer overflow vulnerability in SIP backup module of multiple Huawei products (CNVD-2017-37976)

Huawei DP300 and so on are products of Huawei, China.Huawei DP300 is a video conferencing end device.IPS Module is an intrusion prevention module.SIP backup is one of the SIP backup modules. A buffer overflow vulnerability exists in the SIP backup module in several Huawei products due to the...

Buffer overflow vulnerability in SIP backup module of multiple Huawei products (CNVD-2017-37972)

Huawei DP300 and so on are products of Huawei, China.Huawei DP300 is a video conferencing end device.IPS Module is an intrusion prevention module.SIP backup is one of the SIP backup modules. A buffer overflow vulnerability exists in the SIP backup module in multiple Huawei products due to the...

Buffer overflow vulnerability in SIP backup module of multiple Huawei products (CNVD-2017-37973)

Huawei DP300 and so on are products of Huawei, China.Huawei DP300 is a video conferencing end device.IPS Module is an intrusion prevention module.SIP backup is one of the SIP backup modules. A buffer overflow vulnerability exists in the SIP backup module in multiple Huawei products due to the...

Buffer overflow vulnerability in SIP backup module of multiple Huawei products (CNVD-2017-37975)

Huawei DP300 and so on are products of Huawei, China.Huawei DP300 is a video conferencing end device.IPS Module is an intrusion prevention module.SIP backup is one of the SIP backup modules. A buffer overflow vulnerability exists in the SIP backup module in several Huawei products due to the...

Buffer Overflow Vulnerability in SIP Backup Module for Multiple Huawei Products

Huawei DP300 and so on are products of Huawei, China.Huawei DP300 is a video conferencing end device.IPS Module is an intrusion prevention module.SIP backup is one of the SIP backup modules. A buffer overflow vulnerability exists in the SIP backup module in multiple Huawei products due to the...

CVE-2017-12328

A vulnerability in Session Initiation Protocol SIP call handling in Cisco IP Phone 8800 Series devices could allow an unauthenticated, remote attacker to cause a denial of service DoS condition because the SIP process unexpectedly restarts. All active phone calls are dropped as the SIP process...

CVE-2017-12259

A vulnerability in the implementation of Session Initiation Protocol SIP functionality in Cisco Small Business SPA51x Series IP Phones could allow an unauthenticated, remote attacker to cause an affected device to become unresponsive, resulting in a denial of service DoS condition. The...

CVE-2017-12260

A vulnerability in the implementation of Session Initiation Protocol SIP functionality in Cisco Small Business SPA50x, SPA51x, and SPA52x Series IP Phones could allow an unauthenticated, remote attacker to cause an affected device to become unresponsive, resulting in a denial of service DoS...

Cisco Small Business SPA50x, SPA51x, and SPA52x Series IP Phones Denial of Service Vulnerability

The Cisco Small Business SPA50x, SPA51x, and SPA52x Series IP Phones are IP telephony products from Cisco USA. A denial of service vulnerability exists in the implementation of the Session Initiation Protocol SIP feature in the Cisco Small Business SPA50x, SPA51x, and SPA52x Series IP Phones, whi...

Cisco Small Business SPA51x Series IP Phones Denial of Service Vulnerability

Cisco Small Business SPA51x Series IP Phones is an SPA51x series of IP phones for small and medium-sized businesses from Cisco. A denial of service vulnerability exists in the implementation of the Session Initiation Protocol SIP feature in Cisco Small Business SPA51x Series IP Phones, which stem...

Cisco Small Business SPA50x, SPA51x, and SPA52x Series IP Phones SIP Denial of Service Vulnerability

A vulnerability in the implementation of Session Initiation Protocol SIP functionality in Cisco Small Business SPA50x, SPA51x, and SPA52x Series IP Phones could allow an unauthenticated, remote attacker to cause an affected device to become unresponsive, resulting in a denial of service DoS...