PT-2016-4814 · Cisco · Cisco Unified Communications Manager Im/Presence Service

Publicado 2016-08-08 · Atualizado 2017-08-16 · CVE-2016-1466

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager IM and Presence Service versions 9.1(1) SU6 through 9.1(1) SU7, 10.5(2) SU2 through 10.5(2) SU2a, 11.0(1) SU1, 11.5(1)

Description The issue allows remote attackers to cause a denial of service, resulting in the restart of the sipd process, by sending crafted headers in a SIP packet.

Recommendations For versions 9.1(1) SU6 through 9.1(1) SU7, update to a version that fixes the issue. For versions 10.5(2) SU2 through 10.5(2) SU2a, update to a version that fixes the issue. For version 11.0(1) SU1, update to a version that fixes the issue. For version 11.5(1), update to a version that fixes the issue.

Correção

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2016-1466

Produtos afetados

Cisco Unified Communications Manager Im/Presence Service

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2016-1466 · Nota de Segurança
• http://securitytracker.com/id/1036526 · Nota
• https://osv.dev/vulnerability/CVE-2016-1466 · Aviso do Fabricante
• http://securityfocus.com/bid/92271 · Nota
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160803-ucm · Aviso do Fabricante