PT-2008-5153 · Cisco · Cisco Ios

Publicado 2008-09-24 · Atualizado 2022-06-02 · CVE-2008-3799

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2 through 12.4

Description A memory leak in the Session Initiation Protocol (SIP) implementation allows remote attackers to cause a denial of service (memory consumption and voice-service outage) via unspecified valid SIP messages. Multiple vulnerabilities exist in the SIP implementation that can be exploited remotely to trigger a memory leak or to cause a reload of the IOS device.

Recommendations For Cisco IOS versions 12.2 through 12.4, update to a fixed version of Cisco IOS software that contains fixes for all vulnerabilities addressed in this advisory. As a temporary workaround, consider disabling the SIP protocol or feature itself if administrators do not require the Cisco IOS device to provide voice over IP services.

Correção

DoS

Missing Release of Resource after Effective Lifetime

Enumeração de Fraquezas

CWE-772

Identificadores relacionados

CVE-2008-3799

Produtos afetados

Cisco Ios

Referências · 7

• http://secunia.com/advisories/31990 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-3799 · Nota de Segurança
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5927 · Nota
• http://securitytracker.com/id?1020939 · Nota
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20080924-sip · Aviso do Fabricante
• http://vupen.com/english/advisories/2008/2670 · Nota
• http://cisco.com/en/US/products/products_security_advisory09186a0080a01562.shtml · Aviso do Fabricante