CVE-2016-6384

Опубликовано: 05 окт. 2016

Источник: nvd

CVSS3: 7.5

CVSS2: 7.8

EPSS Низкий

Описание

Cisco IOS 12.2 through 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.17 and 16.2 allow remote attackers to cause a denial of service (device reload) via crafted fields in an H.323 message, aka Bug ID CSCux04257.

Ссылки

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160928-h323
Vendor Advisory
http://www.securityfocus.com/bid/93209
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1036914
Third Party Advisory
VDB Entry
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160928-h323
Vendor Advisory
http://www.securityfocus.com/bid/93209
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1036914
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*

Версия от 12.2 (включая) до 12.4 (включая)

cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*

Версия от 15.0 (включая) до 15.6 (включая)

cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*

Версия от 3.1 (включая) до 3.17 (включая)

cpe:2.3:o:cisco:ios_xe:16.2:*:*:*:*:*:*:*

EPSS

Процентиль: 83%

0.01972

Низкий

7.5 High

CVSS3

7.8 High

CVSS2

Дефекты

CWE-20

Связанные уязвимости

GHSA-5ccc-frc7-5rrg