CVE-2017-6791: Buffer Overflow
A vulnerability in the Trust Verification Service (TVS) of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper handling of Transport Layer Security (TLS) traffic by the affected software. An attacker could exploit this vulnerability by generating incomplete traffic streams. A successful exploit could allow the attacker to deny access to the TVS for an affected device, resulting in a DoS condition, until an administrator restarts the service. Known Affected Releases 10.0(1.10000.24) 10.5(2.10000.5) 11.0(1.10000.10) 9.1(2.10000.28). Cisco Bug IDs: CSCux21905.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-6791?
CVE-2017-6791 has been classified with a severity rating that indicates it can lead to a denial of service condition.
How do I fix CVE-2017-6791?
To mitigate CVE-2017-6791, users should apply the security patches released by Cisco for the affected versions of Unified Communications Manager.
What versions of Cisco Unified Communications Manager are affected by CVE-2017-6791?
CVE-2017-6791 affects Cisco Unified Communications Manager versions 9.1(2.10000.28), 10.0(1.10000.24), 10.5(2.10000.5), and 11.0(1.10000.10).
What is the impact of CVE-2017-6791?
The impact of CVE-2017-6791 is a potential denial of service attack that can disrupt the services provided by the affected Cisco device.
Is authentication required to exploit CVE-2017-6791?
No, CVE-2017-6791 can be exploited by an unauthenticated remote attacker.