high
7.1
CWE
Advisory Published
Updated

CVE-2008-3802

First published: Fri Sep 26 2008(Updated: )

Unspecified vulnerability in the Session Initiation Protocol (SIP) implementation in Cisco IOS 12.2 through 12.4, when VoIP is configured, allows remote attackers to cause a denial of service (device reload) via unspecified valid SIP messages, aka Cisco bug ID CSCsk42759, a different vulnerability than CVE-2008-3800 and CVE-2008-3801.

Credit: ykramarz@cisco.com

Affected SoftwareAffected VersionHow to fix
Puppet Cisco IOS=12.2b
Puppet Cisco IOS=12.2bx
Puppet Cisco IOS=12.2by
Puppet Cisco IOS=12.2cz
Puppet Cisco IOS=12.2mc
Puppet Cisco IOS=12.2t
Puppet Cisco IOS=12.2tpc
Puppet Cisco IOS=12.2xb
Puppet Cisco IOS=12.2xm
Puppet Cisco IOS=12.2xt
Puppet Cisco IOS=12.2xu
Puppet Cisco IOS=12.2xw
Puppet Cisco IOS=12.2ya
Puppet Cisco IOS=12.2yb
Puppet Cisco IOS=12.2yc
Puppet Cisco IOS=12.2yd
Puppet Cisco IOS=12.2yf
Puppet Cisco IOS=12.2yh
Puppet Cisco IOS=12.2yj
Puppet Cisco IOS=12.2yl
Puppet Cisco IOS=12.2ym
Puppet Cisco IOS=12.2yn
Puppet Cisco IOS=12.2yt
Puppet Cisco IOS=12.2yu
Puppet Cisco IOS=12.2yv
Puppet Cisco IOS=12.2yw
Puppet Cisco IOS=12.2yy
Puppet Cisco IOS=12.2zb
Puppet Cisco IOS=12.2zc
Puppet Cisco IOS=12.2zd
Puppet Cisco IOS=12.2ze
Puppet Cisco IOS=12.2zf
Puppet Cisco IOS=12.2zh
Puppet Cisco IOS=12.2zj
Puppet Cisco IOS=12.2zl
Puppet Cisco IOS=12.2zp
Puppet Cisco IOS=12.3
Puppet Cisco IOS=12.3b
Puppet Cisco IOS=12.3t
Puppet Cisco IOS=12.3tpc
Puppet Cisco IOS=12.3va
Puppet Cisco IOS=12.3xa
Puppet Cisco IOS=12.3xb
Puppet Cisco IOS=12.3xc
Puppet Cisco IOS=12.3xd
Puppet Cisco IOS=12.3xe
Puppet Cisco IOS=12.3xf
Puppet Cisco IOS=12.3xg
Puppet Cisco IOS=12.3xi
Puppet Cisco IOS=12.3xj
Puppet Cisco IOS=12.3xk
Puppet Cisco IOS=12.3xl
Puppet Cisco IOS=12.3xq
Puppet Cisco IOS=12.3xr
Puppet Cisco IOS=12.3xu
Puppet Cisco IOS=12.3xw
Puppet Cisco IOS=12.3xx
Puppet Cisco IOS=12.3xy
Puppet Cisco IOS=12.3xz
Puppet Cisco IOS=12.3yf
Puppet Cisco IOS=12.3yg
Puppet Cisco IOS=12.3yk
Puppet Cisco IOS=12.3ym
Puppet Cisco IOS=12.3yq
Puppet Cisco IOS=12.3ys
Puppet Cisco IOS=12.3yt
Puppet Cisco IOS=12.3yu
Puppet Cisco IOS=12.3yx
Puppet Cisco IOS=12.3yz
Puppet Cisco IOS=12.3za
Puppet Cisco IOS=12.4
Puppet Cisco IOS=12.4mr
Puppet Cisco IOS=12.4t
Puppet Cisco IOS=12.4xa
Puppet Cisco IOS=12.4xb
Puppet Cisco IOS=12.4xc
Puppet Cisco IOS=12.4xd
Puppet Cisco IOS=12.4xe
Puppet Cisco IOS=12.4xj
Puppet Cisco IOS=12.4xl
Puppet Cisco IOS=12.4xp
Puppet Cisco IOS=12.4xt
Puppet Cisco IOS=12.4xv
Puppet Cisco IOS=12.4xw
Puppet Cisco IOS=12.4xy

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is the severity of CVE-2008-3802?

    CVE-2008-3802 is classified as a high-severity vulnerability due to its potential to cause a denial of service.

  • How do I fix CVE-2008-3802?

    To fix CVE-2008-3802, upgrade your Cisco IOS to a version that is not affected by this vulnerability.

  • What systems are affected by CVE-2008-3802?

    CVE-2008-3802 affects multiple versions of Cisco IOS, specifically versions 12.2 through 12.4, when VoIP is configured.

  • Can CVE-2008-3802 allow remote attacks?

    Yes, CVE-2008-3802 allows remote attackers to send valid SIP messages that can trigger a device reload.

  • What type of attack does CVE-2008-3802 facilitate?

    CVE-2008-3802 facilitates denial of service attacks on devices running vulnerable versions of Cisco IOS.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203