| Package | Affected versions | Patched versions |
|---|---|---|
| unified communications manager | = 6.0(1a)= 6.0(1b)= 6.1(1)= 6.1(1a)= 6.1(1b)= 6.1(2)= 6.1(3)= 6.1(3a)= 6.1(3b)= 6.1(4)= 6.1(4a)= 6.1(4b)= 6.1(5)= 7.1(1)= 7.1(2)= 7.1(2a)= 7.1(2b)= 7.1(3)= 7.1(3a)= 7.1(3b)= 7.1(5)= 7.1(5a)= 7.1(5b)= 7.1(5b)su1= 7.1(5b)su1a= 7.1(5b)su2= 7.1(5b)su3= 7.1(5b)su4= 8.0= 8.0(1)= 8.0(2)= 8.0(2a)= 8.0(2b)= 8.0(2c)= 8.0(3)= 8.0(3a)= 8.5(1)su1= 8.5(1)su2= 8.5(1)su3 |
The SIP implementation in Cisco Unified Communications Manager (CUCM) 6.x and 7.x before 7.1(5b)su5, 8.x before 8.5(1)su4, and 8.6 before 8.6(2a)su1; Cisco IOS 12.2 through 12.4 and 15.0 through 15.2; and Cisco IOS XE 3.3.xSG before 3.3.1SG, 3.4.xS, and 3.5.xS allows remote attackers to cause a denial of service (service crash or device reload) via a crafted SIP message containing an SDP session description, aka Bug IDs CSCtw66721, CSCtj33003, and CSCtw84664.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free