PT-2017-12483 · Cisco · Cisco Meeting Server

Publicado 2017-11-16 · Atualizado 2019-10-09 · CVE-2017-12311

Positive Technologies (AI Summary)

CVSS v3.1

5.8

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Cisco Meeting Server (affected versions not specified)

Description A vulnerability in the H.264 decoder function could allow an unauthenticated, remote attacker to cause a Cisco Meeting Server media process to restart unexpectedly when it receives an illegal H.264 frame. The issue is triggered by an H.264 frame with an invalid picture parameter set (PPS) value. An attacker could exploit this by sending a malformed H.264 frame, potentially causing a denial of service (DoS) condition due to the media process restart. The media session should re-establish within a few seconds, with a brief interruption in service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Enumeração de Fraquezas

CWE-399

CWE-20

Identificadores relacionados

CVE-2017-12311

Produtos afetados

Cisco Meeting Server

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2017-12311 · Nota de Segurança
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-cms · Aviso do Fabricante
• http://securitytracker.com/id/1039827 · Nota
• http://securityfocus.com/bid/101855 · Nota
• https://osv.dev/vulnerability/CVE-2017-12311 · Aviso do Fabricante