PT-2010-2340 · Cisco · Cisco Ios

Published 2010-03-24 · Updated 2017-08-17 · CVE-2010-0583

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.1 through 12.4 Cisco IOS versions 15.0M before 15.0(1)M1

Description A memory leak in the H.323 implementation allows remote attackers to cause a denial of service via malformed H.323 packets. This issue may be exploited to consume memory and cause a device reload. Two vulnerabilities in the H.323 implementation may be exploited remotely to cause a denial of service condition on a device running a vulnerable version of Cisco IOS Software.

Recommendations For Cisco IOS versions 12.1 through 12.4, consider disabling H.323 if it is not required, as there are no workarounds other than disabling the service. For Cisco IOS versions 15.0M before 15.0(1)M1, consider disabling H.323 if it is not required, as there are no workarounds other than disabling the service. Update to a version of Cisco IOS Software that addresses these vulnerabilities, as listed in the Cisco IOS Software Security Advisory.

Fix

DoS

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2010-0583

Affected Products

Cisco Ios

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2010-0583 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20100324-h323 · Vendor Advisory
• http://cisco.com/en/US/products/products_security_advisory09186a0080b20ee4.shtml · Vendor Advisory
• http://securityfocus.com/bid/38934 · Note
• http://securitytracker.com/id?1023742 · Note
• http://osvdb.org/63181 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/57140 · Note
• http://vupen.com/english/advisories/2010/0706 · Note
• http://secunia.com/advisories/39067 · Note