The vulnerability of the microprogramming software of the Cisco TelePresence Video Communication Server allows a intruder to trigger a service failure.

The vulnerability of the microprogramming software of the Cisco TelePresence Video Communication Server exists due to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause a service failure disabling VoIP services by usi...

kamailio SIP Proxy Buffer Overflow Vulnerability

kamailio is an open source GPL-based SIP Session Initiation Protocol, Session Initiation Protocol server developed by the FhG FOKUS Institute in Germany . A buffer overflow vulnerability exists in kamailio's SIP proxy. An attacker can exploit this vulnerability to execute arbitrary code...

Cisco Releases Security Updates

Cisco has released security updates to address vulnerabilities in multiple products. Exploitation of these vulnerabilities could allow a remote attacker to create a denial-of-service condition. US-CERT encourages users and administrators to review the following Cisco Security Advisories and apply...

CVE-2016-1338

Cisco TelePresence Video Communication Server VCS X8.5.1 and X8.5.2 allows remote authenticated users to cause a denial of service VoIP outage via a crafted SIP message, aka Bug ID CSCuu43026...

UBUNTU-CVE-2016-2316

chansip in Asterisk Open Source 1.8.x, 11.x before 11.21.1, 12.x, and 13.x before 13.7.1 and Certified Asterisk 1.8.28, 11.6 before 11.6-cert12, and 13.1 before 13.1-cert3, when the timert1 sip.conf configuration is set to a value greater than 1245, allows remote attackers to cause a denial of...

Cisco Unified SIP Phone 3905 Series Phones Remote Denial of Service Vulnerability

The Cisco Unified SIP Phone 3905 is a SIP phone device. A security vulnerability exists in the Cisco Unified SIP Phone 3905 that allows a remote user to submit a specially crafted mass communication to the target device to cause the device to stop responding...

Cisco Unified Communications Manager IM and Presence Service REST Denial of Service Vulnerability

Cisco Unified Communications Manager is a call-processing component of a unified communications system.Cisco Unified Communications Manager IM and Presence Service is a CUCM-based platform for instant messaging IM and status display. A security vulnerability in the REST interface of the Cisco...

The vulnerability of the Cisco IOS operating system, which allows a intruder to trigger a service failure

The vulnerability of the Cisco IOS operating system is related to resource management errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service interruptions using a specially crafted SIP packet...

Cisco ASR 1000 Series Router SIP Message Handling Denial of Service Vulnerability

The Cisco ASR1000 Series Aggregation Services Routers provide a WAN edge solution that integrates information, communication, collaboration, and commerce. The Cisco ASR 1000 Series Router has a security vulnerability in the processing of SIP messages that allows a remote attacker to exploit the...

The vulnerability of the microprogramming software of the Cisco TelePresence VCS device allows a intruder to trigger a service failure.

The vulnerability of Cisco TelePresence VCS’s microprogramming software stems from resource management errors. Exploiting this vulnerability allows a malicious actor to trigger service failure by sending a specially crafted SDP request with session parameters during an SIP connection...

Cisco TelePresence Video Communication Server SDP Processing Denial of Service Vulnerability

Cisco TelePresence Video Communication Server is a video conferencing solution that integrates h.323 and SIP. Cisco TelePresence Video Communication Server handles SDP with a security vulnerability that allows an attacker to send specially crafted SDP parameter negotiation requests over a SIP...

Asterisk Open Source/Certified Asterisk Certificate Validation Vulnerability

Asterisk is a free software, open source software that implements the functionality of a telephone user switch PBX. Asterisk Open Source has a security vulnerability due to a failure to properly handle domain names in the CN field of an X.509 certificate when registering a SIP TLS device. Allowin...

Cisco Unity Connection SIP Trunking Integrated Port Denial of Service Vulnerability

Cisco Unity Connection is a feature-rich voice messaging platform that uses the Linux Unified Communications operating system. A security vulnerability exists in Cisco Unity Connection's SIP call handling code that fails to release allocated resources in certain connection scenarios. This allows ...

Cisco Unity Connection SIP Trunking Integration Port UDP 5060 Denial of Service Vulnerability

Cisco Unity Connection is a feature-rich voice messaging platform that uses the Linux Unified Communications operating system. A security vulnerability exists in the Connection Conversation Manager CuCsMgr process of Cisco Unity Connection. It allows an unauthenticated, remote attacker to cause a...

Cisco Unity Connection SIP Trunk Integration Tailored INVITE Message Denial of Service Vulnerability (CNVD-2015-02193)

Cisco Unity Connection is a feature-rich voice messaging platform that uses the Linux Unified Communications operating system. A security vulnerability exists in the Connection Conversation Manager CuCsMgr process of Cisco Unity Connection. An unauthenticated, remote attacker could trigger a...

Cisco TelePresence Video Communication Server/Expressway Denial of Service Vulnerability

Cisco TelePresence Video Communication Server is a video conferencing solution that integrates h.323 and SIP. A denial of service vulnerability exists in Cisco TelePresence Video Communication Server/Expressway, which allows remote attackers to launch denial of service attacks via crafted SIP...

DEBIAN-CVE-2014-8415

Race condition in the chanpjsip channel driver in Asterisk Open Source 12.x before 12.7.1 and 13.x before 13.0.1 allows remote attackers to cause a denial of service assertion failure and crash via a cancel request for a SIP session with a queued action to 1 answer a session or 2 send ringing...

Cisco IOS XE Software SIP DoS (cisco-sa-20140924-sip)

According to its self-reported version, the version of Cisco IOS XE running on the remote host is affected by a vulnerability in the Session Initiation Protocol SIP implementation due to improper handling of SIP messages. A remote attacker can exploit this issue by sending specially crafted SIP...

Cisco IOS Software Network Address Translation (NAT) ALG Module DoS (cisco-sa-20140924-nat)

According to its self-reported version, the version of Cisco IOS running on the remote host is affected by a denial of service vulnerability in the Network Address Translation NAT application-layer gateway ALG module. This issue exists due to improper handling of multipart Session Description...

Cisco Unified Communications Manager SIP Subsystem Vulnerability

A vulnerability in the Session Initiation Protocol SIP subsystem of Cisco Unified Communications Manager Cisco Unified CM could allow an authenticated, remote attacker to trigger a denial of service condition. The vulnerability is due to a failure by the SIP subsystem to properly sanitize...