| Package | Affected versions | Patched versions |
|---|---|---|
| unified communications manager | = 7.0(1)su1= 7.0(1)su1a= 7.0(2)= 7.0(2a)= 7.0(2a)su1= 7.0(2a)su2= 7.1(2a)= 7.1(2a)su1= 7.1(2b)= 7.1(2b)su1= 7.1(3)= 7.1(3a)= 7.1(3a)su1= 7.1(3a)su1a= 7.1(3b)= 7.1(3b)su1= 7.1(3b)su2= 7.1(5)= 7.1(5)su1= 7.1(5)su1a= 7.1(5a)= 7.1(5b)= 7.1(5b)su1= 7.1(5b)su1a= 7.1(5b)su2= 7.1(5b)su3= 8.0 |
The SIP process in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 7.x before 7.1(5b)su4 and 8.x before 8.0(1) does not properly handle SDP data within a SIP call in certain situations related to use of the g729ar8 codec for a Media Termination Point (MTP), which allows remote attackers to cause a denial of service (service outage) via a crafted call, aka Bug ID CSCtc61990.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free