PT-2019-9135 · Avaya · Avaya Communication Manager

Frank Cozijnsen · Published 2019-02-01 · Updated 2019-10-09 · CVE-2018-15617

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Avaya Aura Communication Manager versions 6.3.x through 7.1.3.1 Avaya Aura Communication Manager versions 8.0.0 through 8.0.0

Description A vulnerability in the "capro" process component could allow a remote, unauthenticated user to cause denial of service.

Recommendations For Avaya Aura Communication Manager versions 6.3.x through 7.1.3.1, update to version 7.1.3.2 or later. For Avaya Aura Communication Manager versions 8.0.0 through 8.0.0, update to version 8.0.1 or later.

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2018-15617

Affected Products

Avaya Communication Manager

References · 4

• https://osv.dev/vulnerability/CVE-2018-15617 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-15617 · Security Note
• https://downloads.avaya.com/css/P8/documents/101055396 · Vendor Advisory
• http://securityfocus.com/bid/106826 · Note