PT-2016-4725 · Cisco · Cisco Videoscape Distribution Suite For Internet Streaming

Publicado 2016-03-01 · Atualizado 2016-12-03 · CVE-2016-1353

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Cisco Videoscape Distribution Suite for Internet Streaming (VDS-IS) versions 3.3(0) through 4.1(0)

Description The issue is related to the TCP implementation, which does not properly handle new TCP sessions when a previous session is in a FIN wait state. This allows remote attackers to cause a denial of service, resulting in a TCP outage, by sending FIN packets.

Recommendations For versions 3.3(0) through 4.1(0), consider temporarily restricting the handling of FIN packets to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2016-1353

Produtos afetados

Cisco Videoscape Distribution Suite For Internet Streaming

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2016-1353 · Nota de Segurança
• http://securitytracker.com/id/1035123 · Nota
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160226-vds-is · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2016-1353 · Aviso do Fabricante