PT-2017-2029 · Microsoft+1 · Windows+1

Published 2017-04-20 · Updated 2017-07-11 · CVE-2017-3808

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager versions prior to 10.5.2.14900-16 Cisco Unified Communications Manager versions prior to 11.0.1.23900-5 Cisco Unified Communications Manager versions prior to 11.5.1.12900-2 Microsoft Windows (affected versions not specified)

Description A vulnerability in the Session Initiation Protocol (SIP) UDP throttling process could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The issue is due to insufficient rate limiting protection. An attacker could exploit this by sending a high rate of SIP messages to the affected device, potentially causing it to reload unexpectedly. The device and services will restart automatically.

Recommendations For Cisco Unified Communications Manager versions prior to 10.5.2.14900-16, update to version 10.5.2.14900-16 or later. For Cisco Unified Communications Manager versions prior to 11.0.1.23900-5, update to version 11.0.1.23900-5 or later. For Cisco Unified Communications Manager versions prior to 11.5.1.12900-2, update to version 11.5.1.12900-2 or later. For Microsoft Windows, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2017-01196

CVE-2017-3808

Affected Products

Cisco Unified Communications Manager

Windows

References · 6

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-ucm · Vendor Advisory
• https://bdu.fstec.ru/vul/2017-01196 · Security Note
• https://osv.dev/vulnerability/CVE-2017-3808 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-3808 · Security Note
• http://securityfocus.com/bid/97922 · Note
• http://securitytracker.com/id/1038318 · Note