CVE-2012-3949: Input Validation

Published Sep 27, 2012

Updated

The SIP implementation in Cisco Unified Communications Manager (CUCM) 6.x and 7.x before 7.1(5b)su5, 8.x before 8.5(1)su4, and 8.6 before 8.6(2a)su1; Cisco IOS 12.2 through 12.4 and 15.0 through 15.2; and Cisco IOS XE 3.3.xSG before 3.3.1SG, 3.4.xS, and 3.5.xS allows remote attackers to cause a denial of service (service crash or device reload) via a crafted SIP message containing an SDP session description, aka Bug IDs CSCtw66721, CSCtj33003, and CSCtw84664.

Affected Software

260 affected components

cisco Unified Communications Manager=6.0\(1a\)

cisco Unified Communications Manager=6.0\(1b\)

cisco Unified Communications Manager=6.1\(1\)

cisco Unified Communications Manager=6.1\(1a\)

cisco Unified Communications Manager=6.1\(1b\)

cisco Unified Communications Manager=6.1\(2\)

cisco Unified Communications Manager=6.1\(3\)

cisco Unified Communications Manager=6.1\(3a\)

cisco Unified Communications Manager=6.1\(3b\)

cisco Unified Communications Manager=6.1\(4\)

cisco Unified Communications Manager=6.1\(4a\)

cisco Unified Communications Manager=6.1\(4b\)

cisco Unified Communications Manager=6.1\(5\)

cisco Unified Communications Manager=7.1\(1\)

cisco Unified Communications Manager=7.1\(2\)

cisco Unified Communications Manager=7.1\(2a\)

cisco Unified Communications Manager=7.1\(2b\)

cisco Unified Communications Manager=7.1\(3\)

cisco Unified Communications Manager=7.1\(3a\)

cisco Unified Communications Manager=7.1\(3b\)

cisco Unified Communications Manager=7.1\(5\)

cisco Unified Communications Manager=7.1\(5a\)

cisco Unified Communications Manager=7.1\(5b\)

cisco Unified Communications Manager=7.1\(5b\)su1

cisco Unified Communications Manager=7.1\(5b\)su1a

cisco Unified Communications Manager=7.1\(5b\)su2

cisco Unified Communications Manager=7.1\(5b\)su3

cisco Unified Communications Manager=7.1\(5b\)su4

cisco Unified Communications Manager=8.0

cisco Unified Communications Manager=8.0\(1\)

cisco Unified Communications Manager=8.0\(2\)

cisco Unified Communications Manager=8.0\(2a\)

cisco Unified Communications Manager=8.0\(2b\)

cisco Unified Communications Manager=8.0\(2c\)

cisco Unified Communications Manager=8.0\(3\)

cisco Unified Communications Manager=8.0\(3a\)

cisco Unified Communications Manager=8.5\(1\)su1

cisco Unified Communications Manager=8.5\(1\)su2

cisco Unified Communications Manager=8.5\(1\)su3

cisco IOS=12.2

cisco IOS=12.2b

cisco IOS=12.2bc

cisco IOS=12.2bw

cisco IOS=12.2bx

cisco IOS=12.2by

cisco IOS=12.2bz

cisco IOS=12.2ca

cisco IOS=12.2cx

cisco IOS=12.2cy

cisco IOS=12.2cz

cisco IOS=12.2da

cisco IOS=12.2dd

cisco IOS=12.2dx

cisco IOS=12.2ew

cisco IOS=12.2ewa

cisco IOS=12.2ex

cisco IOS=12.2ey

cisco IOS=12.2ez

cisco IOS=12.2fx

cisco IOS=12.2fy

cisco IOS=12.2fz

cisco IOS=12.2irb

cisco IOS=12.2ixa

cisco IOS=12.2ixb

cisco IOS=12.2ixc

cisco IOS=12.2ixd

cisco IOS=12.2ixe

cisco IOS=12.2ixf

cisco IOS=12.2ixg

cisco IOS=12.2l

cisco IOS=12.2mb

cisco IOS=12.2rc

cisco IOS=12.2s

cisco IOS=12.2sb

cisco IOS=12.2sbc

cisco IOS=12.2sca

cisco IOS=12.2scb

cisco IOS=12.2se

cisco IOS=12.2sea

cisco IOS=12.2seb

cisco IOS=12.2sec

cisco IOS=12.2sed

cisco IOS=12.2see

cisco IOS=12.2sef

cisco IOS=12.2seg

cisco IOS=12.2sg

cisco IOS=12.2sga

cisco IOS=12.2sm

cisco IOS=12.2sr

cisco IOS=12.2sra

cisco IOS=12.2srb

cisco IOS=12.2src

cisco IOS=12.2su

cisco IOS=12.2sv

cisco IOS=12.2sva

cisco IOS=12.2svc

cisco IOS=12.2svd

cisco IOS=12.2sve

cisco IOS=12.2sw

cisco IOS=12.2sx

cisco IOS=12.2sxa

cisco IOS=12.2sxb

cisco IOS=12.2sxd

cisco IOS=12.2sxe

cisco IOS=12.2sxf

cisco IOS=12.2sxi

cisco IOS=12.2sy

cisco IOS=12.2sz

cisco IOS=12.2t

cisco IOS=12.2tpc

cisco IOS=12.2xa

cisco IOS=12.2xb

cisco IOS=12.2xc

cisco IOS=12.2xd

cisco IOS=12.2xe

cisco IOS=12.2xf

cisco IOS=12.2xg

cisco IOS=12.2xh

cisco IOS=12.2xi

cisco IOS=12.2xj

cisco IOS=12.2xk

cisco IOS=12.2xl

cisco IOS=12.2xm

cisco IOS=12.2xn

cisco IOS=12.2xnb

cisco IOS=12.2xnc

cisco IOS=12.2xnd

cisco IOS=12.2xo

cisco IOS=12.2xq

cisco IOS=12.2xr

cisco IOS=12.2xs

cisco IOS=12.2xt

cisco IOS=12.2xu

cisco IOS=12.2xv

cisco IOS=12.2xw

cisco IOS=12.2ya

cisco IOS=12.2yb

cisco IOS=12.2yc

cisco IOS=12.2yd

cisco IOS=12.2ye

cisco IOS=12.2yf

cisco IOS=12.2yg

cisco IOS=12.2yh

cisco IOS=12.2yj

cisco IOS=12.2yk

cisco IOS=12.2yl

cisco IOS=12.2ym

cisco IOS=12.2yn

cisco IOS=12.2yo

cisco IOS=12.2yp

cisco IOS=12.2yq

cisco IOS=12.2yr

cisco IOS=12.2ys

cisco IOS=12.2yt

cisco IOS=12.2yu

cisco IOS=12.2yv

cisco IOS=12.2yw

cisco IOS=12.2yx

cisco IOS=12.2yy

cisco IOS=12.2yz

cisco IOS=12.2za

cisco IOS=12.2zb

cisco IOS=12.2zc

cisco IOS=12.2zd

cisco IOS=12.2ze

cisco IOS=12.2zf

cisco IOS=12.2zg

cisco IOS=12.2zh

cisco IOS=12.2zj

cisco IOS=12.2zl

cisco IOS=12.2zp

cisco IOS=12.2zu

cisco IOS=12.2zx

cisco IOS=12.2zy

cisco IOS=12.2zya

cisco IOS=12.3

cisco IOS=12.3b

cisco IOS=12.3bc

cisco IOS=12.3bw

cisco IOS=12.3ja

cisco IOS=12.3jea

cisco IOS=12.3jeb

cisco IOS=12.3jec

cisco IOS=12.3jk

cisco IOS=12.3jl

cisco IOS=12.3jx

cisco IOS=12.3t

cisco IOS=12.3tpc

cisco IOS=12.3va

cisco IOS=12.3xa

cisco IOS=12.3xb

cisco IOS=12.3xc

cisco IOS=12.3xd

cisco IOS=12.3xe

cisco IOS=12.3xf

cisco IOS=12.3xg

cisco IOS=12.3xi

cisco IOS=12.3xk

cisco IOS=12.3xl

cisco IOS=12.3xq

cisco IOS=12.3xr

cisco IOS=12.3xs

cisco IOS=12.3xu

cisco IOS=12.3xw

cisco IOS=12.3xx

cisco IOS=12.3xy

cisco IOS=12.3xz

cisco IOS=12.3ya

cisco IOS=12.3yd

cisco IOS=12.3yf

cisco IOS=12.3yg

cisco IOS=12.3yh

cisco IOS=12.3yj

cisco IOS=12.3yk

cisco IOS=12.3ym

cisco IOS=12.3yq

cisco IOS=12.3ys

cisco IOS=12.3yt

cisco IOS=12.3yu

cisco IOS=12.3yx

cisco IOS=12.3yz

cisco IOS=12.3za

cisco IOS=15.0

cisco IOS=15.0\(1\)s1

cisco IOS=15.0\(1\)s2

cisco IOS=15.0\(1\)se

cisco IOS=15.0m

cisco IOS=15.0mr

cisco IOS=15.0mra

cisco IOS=15.0s

cisco IOS=15.0sa

cisco IOS=15.0sg

cisco IOS=15.0xa

cisco IOS=15.0xo

cisco IOS=15.1

cisco IOS=15.1\(1\)xb1

cisco IOS=15.1\(2\)t

cisco IOS=15.1\(3\)t

cisco IOS=15.1\(4\)m

cisco IOS=15.1\(4\)m1

cisco IOS=15.1ey

cisco IOS=15.1gc

cisco IOS=15.1m

cisco IOS=15.1s

cisco IOS=15.1t

cisco IOS=15.1xb

cisco IOS=15.2

Cisco IOS XE=3.3.0sg

Cisco IOS XE=3.3.1s

Cisco IOS XE=3.3.1sg

Cisco IOS XE=3.4.0as

Cisco IOS XE=3.4.0s

Cisco IOS XE=3.4.1s

Cisco IOS XE=3.4.2s

Cisco IOS XE=3.4.3s

Cisco IOS XE=3.4.xs

Cisco IOS XE=3.5.0s

Cisco IOS XE=3.5.1s

Cisco IOS XE=3.5.2s

Cisco IOS XE=3.5.xs

Event History

Sep 27, 2012

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2012-3949?

CVE-2012-3949 is rated as a medium severity vulnerability.

How do I fix CVE-2012-3949?

To fix CVE-2012-3949, upgrade to the appropriate patched version of Cisco Unified Communications Manager or IOS as per the advisory.

Who is affected by CVE-2012-3949?

CVE-2012-3949 affects users of Cisco Unified Communications Manager versions 6.x, 7.x and specific versions of Cisco IOS and IOS XE.

What types of attacks can exploit CVE-2012-3949?

CVE-2012-3949 can be exploited by remote attackers to cause a denial of service.

Is there a workaround for CVE-2012-3949?

There are no effective workarounds for CVE-2012-3949, the recommended action is to apply the necessary updates.