CVE Vulnerabilities

CVE-2015-0615

Published: Apr 03, 2015 | Modified: Sep 29, 2015
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.1 HIGH
AV:N/AC:M/Au:N/C:N/I:N/A:C
RedHat/V2
RedHat/V3
Ubuntu

The call-handling implementation in Cisco Unity Connection 8.5 before 8.5(1)SU7, 8.6 before 8.6(2a)SU4, 9.x before 9.1(2)SU2, and 10.0 before 10.0(1)SU1, when SIP trunk integration is enabled, allows remote attackers to cause a denial of service (port consumption) by improperly terminating SIP sessions, aka Bug ID CSCul28089.

Affected Software

Name Vendor Start Version End Version
Unity_connection Cisco 8.5(1) (including) 8.5(1) (including)
Unity_connection Cisco 8.5(1)su1 (including) 8.5(1)su1 (including)
Unity_connection Cisco 8.5(1)su2 (including) 8.5(1)su2 (including)
Unity_connection Cisco 8.5(1)su3 (including) 8.5(1)su3 (including)
Unity_connection Cisco 8.5(1)su4 (including) 8.5(1)su4 (including)
Unity_connection Cisco 8.5(1)su5 (including) 8.5(1)su5 (including)
Unity_connection Cisco 8.5(1)su6 (including) 8.5(1)su6 (including)
Unity_connection Cisco 8.5_base (including) 8.5_base (including)
Unity_connection Cisco 8.6(1) (including) 8.6(1) (including)
Unity_connection Cisco 8.6(1a) (including) 8.6(1a) (including)
Unity_connection Cisco 8.6(2) (including) 8.6(2) (including)
Unity_connection Cisco 8.6(2a) (including) 8.6(2a) (including)
Unity_connection Cisco 8.6(2a)su1 (including) 8.6(2a)su1 (including)
Unity_connection Cisco 8.6(2a)su2 (including) 8.6(2a)su2 (including)
Unity_connection Cisco 8.6(2a)su3 (including) 8.6(2a)su3 (including)
Unity_connection Cisco 8.6_base (including) 8.6_base (including)
Unity_connection Cisco 9.0(1) (including) 9.0(1) (including)
Unity_connection Cisco 9.1(1) (including) 9.1(1) (including)
Unity_connection Cisco 9.1(2) (including) 9.1(2) (including)
Unity_connection Cisco 10.0.0 (including) 10.0.0 (including)
Unity_connection Cisco 10.0.5 (including) 10.0.5 (including)

References