CVE-2010-0579: High severity Cisco IOS vulnerability
Published Mar 25, 2010
·Updated
The SIP implementation in Cisco IOS 12.3 and 12.4 allows remote attackers to cause a denial of service (device reload) via a malformed SIP message, aka Bug ID CSCtb93416, the "SIP Message Handling Denial of Service Vulnerability."
Affected Software
43 affected components
Cisco IOS=12.3ym
Cisco IOS=12.3yq
Cisco IOS=12.3xr
Cisco IOS=12.4t
Cisco IOS=12.3xg
Cisco IOS=12.3xd
Cisco IOS=12.3xw
Cisco IOS=12.4mr
Cisco IOS=12.4xt
Cisco IOS=12.3xi
Cisco IOS=12.4gc
Cisco IOS=12.3yu
Cisco IOS=12.3xj
Cisco IOS=12.3t
Cisco IOS=12.4ya
Cisco IOS=12.3xf
Cisco IOS=12.3xl
Cisco IOS=12.3yk
Cisco IOS=12.3yf
Cisco IOS=12.4xd
Cisco IOS=12.4xp
Cisco IOS=12.4yd
Cisco IOS=12.3yt
Cisco IOS=12.4mda
Cisco IOS=12.3yz
Cisco IOS=12.3yg
Cisco IOS=12.3xu
Cisco IOS=12.3xy
Cisco IOS=12.4yg
Cisco IOS=12.4
Cisco IOS=12.4xa
Cisco IOS=12.3za
Cisco IOS=12.3yx
Cisco IOS=12.3xq
Cisco IOS=12.4md
Cisco IOS=12.3ys
Cisco IOS=12.3jk
Cisco IOS=12.4yb
Cisco IOS=12.4xb
Cisco IOS=12.3xx
Cisco IOS=12.4xr
Cisco IOS=12.4ye
Cisco IOS=12.3xk
Remediation
Event History
Mar 25, 2010
CVE Published
via MITRE·08:31 PM
Data Sourced
via MITRE·08:31 PM
Description
Data Sourced
via NVD·09:00 PM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2010-0579?
CVE-2010-0579 has a severity rating that indicates it can cause a denial of service, leading to device reload.
2
How do I fix CVE-2010-0579?
To fix CVE-2010-0579, it is recommended to upgrade to a non-vulnerable version of Cisco IOS.
3
What types of devices are affected by CVE-2010-0579?
CVE-2010-0579 affects various devices running vulnerable versions of Cisco IOS 12.3 and 12.4.
4
What is the attack vector for CVE-2010-0579?
The attack vector for CVE-2010-0579 is through sending a malformed SIP message to the vulnerable device.
5
Is there a workaround for CVE-2010-0579?
There are no specific workarounds for CVE-2010-0579; upgrading to a secure version is recommended.