CVE-2013-1137: Buffer Overflow
Published Feb 27, 2013
·Updated
Cisco Unified Presence Server (CUPS) 8.6, 9.0, and 9.1 before 9.1.1 allows remote attackers to cause a denial of service (CPU consumption) via crafted packets to the SIP TCP port, aka Bug ID CSCua89930.
Affected Software
3 affected components
Cisco Unified Presence Server=8.6
Cisco Unified Presence Server=9.0
Cisco Unified Presence Server=9.1
Event History
Feb 27, 2013
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-1137?
CVE-2013-1137 has a severity rating that indicates it can lead to a denial of service due to CPU consumption.
2
How do I fix CVE-2013-1137?
To mitigate CVE-2013-1137, you need to upgrade Cisco Unified Presence Server to version 9.1.1 or later.
3
What versions of Cisco Unified Presence Server are affected by CVE-2013-1137?
CVE-2013-1137 affects Cisco Unified Presence Server versions 8.6, 9.0, and 9.1 prior to 9.1.1.
4
What type of threat does CVE-2013-1137 pose?
CVE-2013-1137 poses a remote denial of service threat through crafted packets sent to the SIP TCP port.
5
Is there a workaround for CVE-2013-1137?
There is no documented workaround for CVE-2013-1137; upgrading to the patched version is the recommended solution.