Vulnerability in Cisco Unified Callmanager

CVE-2009-2864

Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 5.x before 5.1(3g), 6.x before 6.1(4), 7.0.x before 7.0(2a)su1, and 7.1.x before 7.1(2) allows remote attackers to cause a denial of service (service restart) via malformed SIP messages, aka Bug ID CSCsz95423.

EPSS: 0.029 (86.4th percentile) — read the EPSS interpretation.

Affected products

Cisco Unified_callmanager — versions 5.1(2a), 6.0(1b), 5.0\(4c\)
Cisco Unified_communications_manager — versions 6.1(2)su1, 5.1(2a), 6.1(1)
N/a — versions n/a

References

psirt@cisco.com (x_refsource_OSVDB, vdb-entry)
psirt@cisco.com (x_refsource_CONFIRM, Patch)
psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)
psirt@cisco.com (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
psirt@cisco.com (vdb-entry, x_refsource_VUPEN, Vendor Advisory)
psirt@cisco.com (vdb-entry, x_refsource_XF)
psirt@cisco.com (vdb-entry, x_refsource_BID)