The SIP process in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 7.x before 7.1(5b)su4 and 8.x before 8.0(1) does not properly handle SDP data within a SIP call in certain situations related to use of the g729ar8 codec for a Media Termination Point (MTP), which allows remote attackers to cause a denial of service (service outage) via a crafted call, aka Bug ID CSCtc61990.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Unified_communications_manager | Cisco | 7.0(1)su1 (including) | 7.0(1)su1 (including) |
| Unified_communications_manager | Cisco | 7.0(1)su1a (including) | 7.0(1)su1a (including) |
| Unified_communications_manager | Cisco | 7.0(2) (including) | 7.0(2) (including) |
| Unified_communications_manager | Cisco | 7.0(2a) (including) | 7.0(2a) (including) |
| Unified_communications_manager | Cisco | 7.0(2a)su1 (including) | 7.0(2a)su1 (including) |
| Unified_communications_manager | Cisco | 7.0(2a)su2 (including) | 7.0(2a)su2 (including) |
| Unified_communications_manager | Cisco | 7.1(2a) (including) | 7.1(2a) (including) |
| Unified_communications_manager | Cisco | 7.1(2a)su1 (including) | 7.1(2a)su1 (including) |
| Unified_communications_manager | Cisco | 7.1(2b) (including) | 7.1(2b) (including) |
| Unified_communications_manager | Cisco | 7.1(2b)su1 (including) | 7.1(2b)su1 (including) |
| Unified_communications_manager | Cisco | 7.1(3) (including) | 7.1(3) (including) |
| Unified_communications_manager | Cisco | 7.1(3a) (including) | 7.1(3a) (including) |
| Unified_communications_manager | Cisco | 7.1(3a)su1 (including) | 7.1(3a)su1 (including) |
| Unified_communications_manager | Cisco | 7.1(3a)su1a (including) | 7.1(3a)su1a (including) |
| Unified_communications_manager | Cisco | 7.1(3b) (including) | 7.1(3b) (including) |
| Unified_communications_manager | Cisco | 7.1(3b)su1 (including) | 7.1(3b)su1 (including) |
| Unified_communications_manager | Cisco | 7.1(3b)su2 (including) | 7.1(3b)su2 (including) |
| Unified_communications_manager | Cisco | 7.1(5) (including) | 7.1(5) (including) |
| Unified_communications_manager | Cisco | 7.1(5)su1 (including) | 7.1(5)su1 (including) |
| Unified_communications_manager | Cisco | 7.1(5)su1a (including) | 7.1(5)su1a (including) |
| Unified_communications_manager | Cisco | 7.1(5a) (including) | 7.1(5a) (including) |
| Unified_communications_manager | Cisco | 7.1(5b) (including) | 7.1(5b) (including) |
| Unified_communications_manager | Cisco | 7.1(5b)su1 (including) | 7.1(5b)su1 (including) |
| Unified_communications_manager | Cisco | 7.1(5b)su1a (including) | 7.1(5b)su1a (including) |
| Unified_communications_manager | Cisco | 7.1(5b)su2 (including) | 7.1(5b)su2 (including) |
| Unified_communications_manager | Cisco | 7.1(5b)su3 (including) | 7.1(5b)su3 (including) |
| Unified_communications_manager | Cisco | 8.0 (including) | 8.0 (including) |