PT-2010-2340 · Cisco · Cisco Ios

Publicado 2010-03-24 · Atualizado 2017-08-17 · CVE-2010-0583

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.1 through 12.4 Cisco IOS versions 15.0M before 15.0(1)M1

Description A memory leak in the H.323 implementation allows remote attackers to cause a denial of service via malformed H.323 packets. This issue may be exploited to consume memory and cause a device reload. Two vulnerabilities in the H.323 implementation may be exploited remotely to cause a denial of service condition on a device running a vulnerable version of Cisco IOS Software.

Recommendations For Cisco IOS versions 12.1 through 12.4, consider disabling H.323 if it is not required, as there are no workarounds other than disabling the service. For Cisco IOS versions 15.0M before 15.0(1)M1, consider disabling H.323 if it is not required, as there are no workarounds other than disabling the service. Update to a version of Cisco IOS Software that addresses these vulnerabilities, as listed in the Cisco IOS Software Security Advisory.

Correção

DoS

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2010-0583

Produtos afetados

Cisco Ios

Referências · 9

• http://securityfocus.com/bid/38934 · Nota
• http://securitytracker.com/id?1023742 · Nota
• http://osvdb.org/63181 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/57140 · Nota
• http://vupen.com/english/advisories/2010/0706 · Nota
• http://secunia.com/advisories/39067 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-0583 · Nota de Segurança
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20100324-h323 · Aviso do Fabricante
• http://cisco.com/en/US/products/products_security_advisory09186a0080b20ee4.shtml · Aviso do Fabricante