Cisco IOS SIP多个拒绝服务漏洞

发布时间：2008-09-25 录入：启明星辰
BUGTRAQ ID: 31361
CVE ID: CVE-2008-3799
CVE-2008-3800
CVE-2008-3801
CVE-2008-3802
CNCVE ID：CNCVE-20083799
CNCVE-20083800
CNCVE-20083801
CNCVE-20083802

Cisco IOS是一款流行的Internet网络操作系统。
Cisco IOS SIP实现存在多个问题，远程攻击者可以利用漏洞进行内存泄漏攻击或导致IOS设备重载。
Cisco IOS SIP协议用于管理通过IP网络的语音和视频呼叫。负责处理呼叫设置和终止。
Cisco IOS SIP协议实现存在多个拒绝服务攻击，这些问题可通过处理合法SIP消息来触发。
-内存泄漏问题
CSCse56800可是受影响设备触发内存泄漏，处理特定类型的合法SIP消息时可触发内存泄漏，最终导致破坏所有语音服务，即使Cisco IOS设备还是在继续运行。此漏洞CVE ID为CVE-2008-3799。
-处理特定和合法的SIP消息时可触发Cisco IOS设备重载，相关的Cisco bug ID和CVE ID为：

• CSCsg91306, CVE ID CVE-2008-3800
• CSCsl62609, CVE ID CVE-2008-3801
• CSCsk42759, CVE ID CVE-2008-3802

Cisco IOS 12.4XY
Cisco IOS 12.4XW
Cisco IOS 12.4XV
Cisco IOS 12.4XT
Cisco IOS 12.4XP
Cisco IOS 12.4XL
Cisco IOS 12.4XJ
Cisco IOS 12.4XE
Cisco IOS 12.4XD
Cisco IOS 12.4XC
Cisco IOS 12.4XB
Cisco IOS 12.4XA
Cisco IOS 12.4T
Cisco IOS 12.4MR
Cisco IOS 12.4
Cisco IOS 12.3ZA
Cisco IOS 12.3YZ
Cisco IOS 12.3YX
Cisco IOS 12.3YU
Cisco IOS 12.3YT
Cisco IOS 12.3YS
Cisco IOS 12.3YQ
Cisco IOS 12.3YM
Cisco IOS 12.3YK
Cisco IOS 12.3YG
Cisco IOS 12.3YE
Cisco IOS 12.3XZ
Cisco IOS 12.3XY
Cisco IOS 12.3XX
Cisco IOS 12.3XW
Cisco IOS 12.3XV
Cisco IOS 12.3XU
Cisco IOS 12.3XR
Cisco IOS 12.3XQ
Cisco IOS 12.3XL
Cisco IOS 12.3XK
Cisco IOS 12.3XJ
Cisco IOS 12.3XI
Cisco IOS 12.3XH
Cisco IOS 12.3XG
Cisco IOS 12.3XF
Cisco IOS 12.3XE
Cisco IOS 12.3XD
Cisco IOS 12.3XC
Cisco IOS 12.3XB
Cisco IOS 12.3XA
Cisco IOS 12.3VA
Cisco IOS 12.3TPC
Cisco IOS 12.3T
Cisco IOS 12.3B
Cisco IOS 12.3
Cisco IOS 12.2ZP
Cisco IOS 12.2ZL
Cisco IOS 12.2ZJ
Cisco IOS 12.2ZH
Cisco IOS 12.2ZF
Cisco IOS 12.2ZE
Cisco IOS 12.2ZD
Cisco IOS 12.2ZC
Cisco IOS 12.2ZB
Cisco IOS 12.2YY
Cisco IOS 12.2YW
Cisco IOS 12.2YV
Cisco IOS 12.2YU
Cisco IOS 12.2YT
Cisco IOS 12.2YN
Cisco IOS 12.2YM
Cisco IOS 12.2YL
Cisco IOS 12.2YJ
Cisco IOS 12.2YH
Cisco IOS 12.2YF
Cisco IOS 12.2YD
Cisco IOS 12.2YC
Cisco IOS 12.2YB
Cisco IOS 12.2YA
Cisco IOS 12.2XW
Cisco IOS 12.2XU
Cisco IOS 12.2XT
Cisco IOS 12.2XM
Cisco IOS 12.2XB
Cisco IOS 12.2TPC
Cisco IOS 12.2T
Cisco IOS 12.2MC
Cisco IOS 12.2CZ
Cisco IOS 12.2BY
Cisco IOS 12.2BX
Cisco IOS 12.2B
可参考如下安全公告获得补丁信息：
<a href=“http://www.cisco.com/en/US/products/products_security_advisory09186a0080a01562.shtml” target=“_blank”>http://www.cisco.com/en/US/products/products_security_advisory09186a0080a01562.shtml</a>