CVE Vulnerabilities

CVE-2011-2561

Published: Aug 29, 2011 | Modified: Jun 15, 2012
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.1 HIGH
AV:N/AC:M/Au:N/C:N/I:N/A:C
RedHat/V2
RedHat/V3
Ubuntu

The SIP process in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 7.x before 7.1(5b)su4 and 8.x before 8.0(1) does not properly handle SDP data within a SIP call in certain situations related to use of the g729ar8 codec for a Media Termination Point (MTP), which allows remote attackers to cause a denial of service (service outage) via a crafted call, aka Bug ID CSCtc61990.

Affected Software

Name Vendor Start Version End Version
Unified_communications_manager Cisco 7.0(1)su1 (including) 7.0(1)su1 (including)
Unified_communications_manager Cisco 7.0(1)su1a (including) 7.0(1)su1a (including)
Unified_communications_manager Cisco 7.0(2) (including) 7.0(2) (including)
Unified_communications_manager Cisco 7.0(2a) (including) 7.0(2a) (including)
Unified_communications_manager Cisco 7.0(2a)su1 (including) 7.0(2a)su1 (including)
Unified_communications_manager Cisco 7.0(2a)su2 (including) 7.0(2a)su2 (including)
Unified_communications_manager Cisco 7.1(2a) (including) 7.1(2a) (including)
Unified_communications_manager Cisco 7.1(2a)su1 (including) 7.1(2a)su1 (including)
Unified_communications_manager Cisco 7.1(2b) (including) 7.1(2b) (including)
Unified_communications_manager Cisco 7.1(2b)su1 (including) 7.1(2b)su1 (including)
Unified_communications_manager Cisco 7.1(3) (including) 7.1(3) (including)
Unified_communications_manager Cisco 7.1(3a) (including) 7.1(3a) (including)
Unified_communications_manager Cisco 7.1(3a)su1 (including) 7.1(3a)su1 (including)
Unified_communications_manager Cisco 7.1(3a)su1a (including) 7.1(3a)su1a (including)
Unified_communications_manager Cisco 7.1(3b) (including) 7.1(3b) (including)
Unified_communications_manager Cisco 7.1(3b)su1 (including) 7.1(3b)su1 (including)
Unified_communications_manager Cisco 7.1(3b)su2 (including) 7.1(3b)su2 (including)
Unified_communications_manager Cisco 7.1(5) (including) 7.1(5) (including)
Unified_communications_manager Cisco 7.1(5)su1 (including) 7.1(5)su1 (including)
Unified_communications_manager Cisco 7.1(5)su1a (including) 7.1(5)su1a (including)
Unified_communications_manager Cisco 7.1(5a) (including) 7.1(5a) (including)
Unified_communications_manager Cisco 7.1(5b) (including) 7.1(5b) (including)
Unified_communications_manager Cisco 7.1(5b)su1 (including) 7.1(5b)su1 (including)
Unified_communications_manager Cisco 7.1(5b)su1a (including) 7.1(5b)su1a (including)
Unified_communications_manager Cisco 7.1(5b)su2 (including) 7.1(5b)su2 (including)
Unified_communications_manager Cisco 7.1(5b)su3 (including) 7.1(5b)su3 (including)
Unified_communications_manager Cisco 8.0 (including) 8.0 (including)

References