CVE-2014-2171: Buffer Overflow
First published: Fri May 02 2014(Updated: )
Heap-based buffer overflow in Cisco TelePresence TC Software 4.x through 6.x before 6.0.1 and TE Software 4.x and 6.0.x before 6.0.2 allows remote attackers to execute arbitrary code via crafted SIP packets, aka Bug ID CSCud81796.
Credit: ykramarz@cisco.com psirt@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco TelePresence TE Software | =4.1.0 | |
| Cisco TelePresence TE Software | =4.1.1 | |
| Cisco TelePresence TE Software | =4.1.2 | |
| Cisco TelePresence TE Software | =4.1.3 | |
| Cisco TelePresence TE Software | =6.0 | |
| Cisco TelePresence TE Software | =6.0.1 | |
| Cisco TelePresence TC | =4.0.0 | |
| Cisco TelePresence TC | =4.0.1 | |
| Cisco TelePresence TC | =4.0.4 | |
| Cisco TelePresence TC | =4.1.1 | |
| Cisco TelePresence TC | =4.1.2 | |
| Cisco TelePresence TC | =4.2.0 | |
| Cisco TelePresence TC | =4.2.1 | |
| Cisco TelePresence TC | =4.2.2 | |
| Cisco TelePresence TC | =4.2.3 | |
| Cisco TelePresence TC | =4.2.4 | |
| Cisco TelePresence TC | =5.0.0 | |
| Cisco TelePresence TC | =5.0.1 | |
| Cisco TelePresence TC | =5.0.2 | |
| Cisco TelePresence TC | =5.1.0 | |
| Cisco TelePresence TC | =5.1.1 | |
| Cisco TelePresence TC | =5.1.2 | |
| Cisco TelePresence TC | =5.1.3 | |
| Cisco TelePresence TC | =5.1.4 | |
| Cisco TelePresence TC | =5.1.5 | |
| Cisco TelePresence TC | =5.1.6 | |
| Cisco TelePresence TC | =5.1.7 | |
| Cisco TelePresence TC | =6.0.0 | |
| =4.1.0 | ||
| =4.1.1 | ||
| =4.1.2 | ||
| =4.1.3 | ||
| =6.0 | ||
| =6.0.1 | ||
| =4.0.0 | ||
| =4.0.1 | ||
| =4.0.4 | ||
| =4.1.1 | ||
| =4.1.2 | ||
| =4.2.0 | ||
| =4.2.1 | ||
| =4.2.2 | ||
| =4.2.3 | ||
| =4.2.4 | ||
| =5.0.0 | ||
| =5.0.1 | ||
| =5.0.2 | ||
| =5.1.0 | ||
| =5.1.1 | ||
| =5.1.2 | ||
| =5.1.3 | ||
| =5.1.4 | ||
| =5.1.5 | ||
| =5.1.6 | ||
| =5.1.7 | ||
| =6.0.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2014-2171?
CVE-2014-2171 has a high severity rating due to its potential for remote code execution.
How do I fix CVE-2014-2171?
To fix CVE-2014-2171, update the affected Cisco TelePresence software to version 6.0.1 or later for TC Software and 6.0.2 or later for TE Software.
Which versions of Cisco software are affected by CVE-2014-2171?
CVE-2014-2171 affects Cisco TelePresence TC Software versions 4.x through 6.x before 6.0.1 and TE Software versions 4.x and 6.0.x before 6.0.2.
Can CVE-2014-2171 be exploited remotely?
Yes, CVE-2014-2171 can be exploited remotely through crafted SIP packets.
What is a heap-based buffer overflow in relation to CVE-2014-2171?
A heap-based buffer overflow in CVE-2014-2171 occurs when a program writes more data to a buffer on the heap than it can hold, potentially allowing an attacker to execute arbitrary code.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/severity
- agent/description
- agent/first-publish-date
- agent/weakness
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/author
- agent/last-modified-date
- agent/source
- agent/tags
- agent/softwarecombine
- agent/event
- vendor/cisco
- canonical/cisco telepresence te software
- version/cisco telepresence te software/4.1.0
- version/cisco telepresence te software/4.1.1
- version/cisco telepresence te software/4.1.2
- version/cisco telepresence te software/4.1.3
- version/cisco telepresence te software/6.0
- version/cisco telepresence te software/6.0.1
- canonical/cisco telepresence tc
- version/cisco telepresence tc/4.0.0
- version/cisco telepresence tc/4.0.1
- version/cisco telepresence tc/4.0.4
- version/cisco telepresence tc/4.1.1
- version/cisco telepresence tc/4.1.2
- version/cisco telepresence tc/4.2.0
- version/cisco telepresence tc/4.2.1
- version/cisco telepresence tc/4.2.2
- version/cisco telepresence tc/4.2.3
- version/cisco telepresence tc/4.2.4
- version/cisco telepresence tc/5.0.0
- version/cisco telepresence tc/5.0.1
- version/cisco telepresence tc/5.0.2
- version/cisco telepresence tc/5.1.0
- version/cisco telepresence tc/5.1.1
- version/cisco telepresence tc/5.1.2
- version/cisco telepresence tc/5.1.3
- version/cisco telepresence tc/5.1.4
- version/cisco telepresence tc/5.1.5
- version/cisco telepresence tc/5.1.6
- version/cisco telepresence tc/5.1.7
- version/cisco telepresence tc/6.0.0