Cisco IOS SIP Processing Vulnerability

Last Update Date: 8 Nov 2013 10:25 Release Date: 8 Nov 2013 2998 Views

RISK: Medium Risk

TYPE: Operating Systems - Networks OS

A vulnerability has been identified in Cisco IOS. A remote user can cause denial of service conditions.

A remote user can send specially crafted, valid SIP messages via IPv4 or IPv6 to the target device to trigger a memory leak, causing the system to become unstable, or cause the target device to reload.

Impact

Denial of Service

System / Technologies affected

Version 15.1GC

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

The vendor has issued a fix (15.1M, 15.1(4)M7).

Vulnerability Identifier

CVE-2013-5553

Source

SecurityTracker