CVE-2020-3226: Cisco IOS and IOS XE Software Session Initiation Protocol Denial of Service Vulnerability

First published: Wed Jun 03 2020(Updated: )

A vulnerability in the Session Initiation Protocol (SIP) library of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to insufficient sanity checks on received SIP messages. An attacker could exploit this vulnerability by sending crafted SIP messages to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a denial of service condition.

Credit: ykramarz@cisco.com

Affected Software	Affected Version	How to fix
Cisco IOS	=15.0\(2\)sg11a
Cisco IOS	=15.3\(3\)jaa1
Cisco IOS	=15.3\(3\)jpi
Cisco IOS	=15.3\(3\)jpj
Cisco IOS	=15.3\(3\)m
Cisco IOS	=15.3\(3\)m1
Cisco IOS	=15.3\(3\)m2
Cisco IOS	=15.3\(3\)m3
Cisco IOS	=15.3\(3\)m4
Cisco IOS	=15.3\(3\)m5
Cisco IOS	=15.3\(3\)m6
Cisco IOS	=15.3\(3\)m7
Cisco IOS	=15.3\(3\)m8
Cisco IOS	=15.3\(3\)m8a
Cisco IOS	=15.3\(3\)m9
Cisco IOS	=15.3\(3\)m10
Cisco IOS	=15.3\(3\)xb12
Cisco IOS	=15.4\(1\)cg
Cisco IOS	=15.4\(1\)t
Cisco IOS	=15.4\(1\)t1
Cisco IOS	=15.4\(1\)t2
Cisco IOS	=15.4\(1\)t3
Cisco IOS	=15.4\(1\)t4
Cisco IOS	=15.4\(2\)cg
Cisco IOS	=15.4\(2\)t
Cisco IOS	=15.4\(2\)t1
Cisco IOS	=15.4\(2\)t2
Cisco IOS	=15.4\(2\)t3
Cisco IOS	=15.4\(2\)t4
Cisco IOS	=15.4\(3\)m
Cisco IOS	=15.4\(3\)m1
Cisco IOS	=15.4\(3\)m2
Cisco IOS	=15.4\(3\)m3
Cisco IOS	=15.4\(3\)m4
Cisco IOS	=15.4\(3\)m5
Cisco IOS	=15.4\(3\)m6
Cisco IOS	=15.4\(3\)m6a
Cisco IOS	=15.4\(3\)m7
Cisco IOS	=15.4\(3\)m7a
Cisco IOS	=15.4\(3\)m8
Cisco IOS	=15.4\(3\)m9
Cisco IOS	=15.4\(3\)m10
Cisco IOS	=15.5\(1\)t
Cisco IOS	=15.5\(1\)t1
Cisco IOS	=15.5\(1\)t2
Cisco IOS	=15.5\(1\)t3
Cisco IOS	=15.5\(1\)t4
Cisco IOS	=15.5\(2\)t
Cisco IOS	=15.5\(2\)t1
Cisco IOS	=15.5\(2\)t2
Cisco IOS	=15.5\(2\)t3
Cisco IOS	=15.5\(2\)t4
Cisco IOS	=15.5\(2\)xb
Cisco IOS	=15.5\(3\)m
Cisco IOS	=15.5\(3\)m1
Cisco IOS	=15.5\(3\)m2
Cisco IOS	=15.5\(3\)m2a
Cisco IOS	=15.5\(3\)m3
Cisco IOS	=15.5\(3\)m4
Cisco IOS	=15.5\(3\)m4a
Cisco IOS	=15.5\(3\)m4b
Cisco IOS	=15.5\(3\)m4c
Cisco IOS	=15.5\(3\)m5
Cisco IOS	=15.5\(3\)m6
Cisco IOS	=15.5\(3\)m6a
Cisco IOS	=15.5\(3\)m7
Cisco IOS	=15.5\(3\)m8
Cisco IOS	=15.5\(3\)m9
Cisco IOS	=15.5\(3\)m10
Cisco IOS	=15.6\(1\)t
Cisco IOS	=15.6\(1\)t0a
Cisco IOS	=15.6\(1\)t1
Cisco IOS	=15.6\(1\)t2
Cisco IOS	=15.6\(1\)t3
Cisco IOS	=15.6\(2\)t
Cisco IOS	=15.6\(2\)t1
Cisco IOS	=15.6\(2\)t2
Cisco IOS	=15.6\(2\)t3
Cisco IOS	=15.6\(3\)m
Cisco IOS	=15.6\(3\)m0a
Cisco IOS	=15.6\(3\)m1
Cisco IOS	=15.6\(3\)m1a
Cisco IOS	=15.6\(3\)m1b
Cisco IOS	=15.6\(3\)m2
Cisco IOS	=15.6\(3\)m2a
Cisco IOS	=15.6\(3\)m3
Cisco IOS	=15.6\(3\)m3a
Cisco IOS	=15.6\(3\)m4
Cisco IOS	=15.6\(3\)m5
Cisco IOS	=15.6\(3\)m6
Cisco IOS	=15.6\(3\)m6a
Cisco IOS	=15.6\(3\)m7
Cisco IOS	=15.7\(3\)m
Cisco IOS	=15.7\(3\)m1
Cisco IOS	=15.7\(3\)m2
Cisco IOS	=15.7\(3\)m3
Cisco IOS	=15.7\(3\)m4
Cisco IOS	=15.7\(3\)m4a
Cisco IOS	=15.7\(3\)m4b
Cisco IOS	=15.8\(3\)m
Cisco IOS	=15.8\(3\)m0a
Cisco IOS	=15.8\(3\)m1
Cisco IOS	=15.8\(3\)m2
Cisco IOS XE	=3.10.0s
Cisco IOS XE	=3.10.1s
Cisco IOS XE	=3.10.2as
Cisco IOS XE	=3.10.2s
Cisco IOS XE	=3.10.2ts
Cisco IOS XE	=3.10.3s
Cisco IOS XE	=3.10.4s
Cisco IOS XE	=3.10.5s
Cisco IOS XE	=3.10.6s
Cisco IOS XE	=3.10.7s
Cisco IOS XE	=3.10.8as
Cisco IOS XE	=3.10.8s
Cisco IOS XE	=3.10.9s
Cisco IOS XE	=3.10.10s
Cisco IOS XE	=3.11.0s
Cisco IOS XE	=3.11.1s
Cisco IOS XE	=3.11.2s
Cisco IOS XE	=3.11.3s
Cisco IOS XE	=3.11.4s
Cisco IOS XE	=3.12.0as
Cisco IOS XE	=3.12.0s
Cisco IOS XE	=3.12.1s
Cisco IOS XE	=3.12.2s
Cisco IOS XE	=3.12.3s
Cisco IOS XE	=3.12.4s
Cisco IOS XE	=3.13.0s
Cisco IOS XE	=3.13.1s
Cisco IOS XE	=3.13.2as
Cisco IOS XE	=3.13.2s
Cisco IOS XE	=3.13.3s
Cisco IOS XE	=3.13.4s
Cisco IOS XE	=3.13.5as
Cisco IOS XE	=3.13.5s
Cisco IOS XE	=3.13.6as
Cisco IOS XE	=3.13.6bs
Cisco IOS XE	=3.13.6s
Cisco IOS XE	=3.13.7as
Cisco IOS XE	=3.13.7s
Cisco IOS XE	=3.13.8s
Cisco IOS XE	=3.13.9s
Cisco IOS XE	=3.13.10s
Cisco IOS XE	=3.14.0s
Cisco IOS XE	=3.14.1s
Cisco IOS XE	=3.14.2s
Cisco IOS XE	=3.14.3s
Cisco IOS XE	=3.14.4s
Cisco IOS XE	=3.15.0s
Cisco IOS XE	=3.15.1cs
Cisco IOS XE	=3.15.1s
Cisco IOS XE	=3.15.2s
Cisco IOS XE	=3.15.3s
Cisco IOS XE	=3.15.4s
Cisco IOS XE	=3.16.0cs
Cisco IOS XE	=3.16.0s
Cisco IOS XE	=3.16.1as
Cisco IOS XE	=3.16.1s
Cisco IOS XE	=3.16.2bs
Cisco IOS XE	=3.16.2s
Cisco IOS XE	=3.16.3s
Cisco IOS XE	=3.16.4as
Cisco IOS XE	=3.16.4bs
Cisco IOS XE	=3.16.4cs
Cisco IOS XE	=3.16.4ds
Cisco IOS XE	=3.16.4es
Cisco IOS XE	=3.16.4gs
Cisco IOS XE	=3.16.5as
Cisco IOS XE	=3.16.5bs
Cisco IOS XE	=3.16.5s
Cisco IOS XE	=3.16.6bs
Cisco IOS XE	=3.16.6s
Cisco IOS XE	=3.16.7as
Cisco IOS XE	=3.16.7bs
Cisco IOS XE	=3.16.7s
Cisco IOS XE	=3.16.8s
Cisco IOS XE	=3.16.9s
Cisco IOS XE	=3.16.10s
Cisco IOS XE	=3.17.0s
Cisco IOS XE	=3.17.1as
Cisco IOS XE	=3.17.1s
Cisco IOS XE	=3.17.2s
Cisco IOS XE	=3.17.3s
Cisco IOS XE	=3.17.4s
Cisco IOS XE	=3.18.0as
Cisco IOS XE	=3.18.1asp
Cisco IOS XE	=3.18.1sp
Cisco IOS XE	=3.18.2asp
Cisco IOS XE	=3.18.3asp
Cisco IOS XE	=3.18.3bsp
Cisco IOS XE	=3.18.3sp
Cisco IOS XE	=3.18.4sp
Cisco IOS XE	=3.18.5sp
Cisco IOS XE	=3.18.6sp
Cisco IOS XE	=16.2.1
Cisco IOS XE	=16.2.2
Cisco IOS XE	=16.3.1
Cisco IOS XE	=16.3.1a
Cisco IOS XE	=16.3.2
Cisco IOS XE	=16.3.3
Cisco IOS XE	=16.3.4
Cisco IOS XE	=16.3.5
Cisco IOS XE	=16.3.6
Cisco IOS XE	=16.3.7
Cisco IOS XE	=16.3.8
Cisco IOS XE	=16.3.9
Cisco IOS XE	=16.4.1
Cisco IOS XE	=16.4.2
Cisco IOS XE	=16.4.3
Cisco IOS XE	=16.5.1
Cisco IOS XE	=16.5.1b
Cisco IOS XE	=16.5.2
Cisco IOS XE	=16.5.3
Cisco IOS XE	=16.6.1
Cisco IOS XE	=16.6.2
Cisco IOS XE	=16.6.3
Cisco IOS XE	=16.6.4
Cisco IOS XE	=16.6.4s
Cisco IOS XE	=16.6.5
Cisco IOS XE	=16.6.5b
Cisco IOS XE	=16.6.6
Cisco IOS XE	=16.7.1
Cisco IOS XE	=16.7.1a
Cisco IOS XE	=16.7.1b
Cisco IOS XE	=16.7.2
Cisco IOS XE	=16.7.3
Cisco IOS XE	=16.7.4
Cisco IOS XE	=16.8.1
Cisco IOS XE	=16.8.1a
Cisco IOS XE	=16.8.1c
Cisco IOS XE	=16.8.1d
Cisco IOS XE	=16.8.1e
Cisco IOS XE	=16.8.1s
Cisco IOS XE	=16.8.2
Cisco IOS XE	=16.8.3
Cisco IOS XE	=16.9.1
Cisco IOS XE	=16.9.1a
Cisco IOS XE	=16.9.1s
Cisco IOS XE	=16.9.2
Cisco IOS XE	=16.9.2s
Cisco IOS XE	=16.9.3
Cisco IOS XE	=16.9.3s
Cisco IOS XE	=16.9.4
Cisco IOS XE	=16.10.1
Cisco IOS XE	=16.10.1a
Cisco IOS XE	=16.10.1b
Cisco IOS XE	=16.10.1c
Cisco IOS XE	=16.10.1d
Cisco IOS XE	=16.10.1e
Cisco IOS XE	=16.10.1f
Cisco IOS XE	=16.10.1g
Cisco IOS XE	=16.10.1s
Cisco IOS XE	=16.10.2
Cisco IOS XE	=16.11.1
Cisco IOS XE	=16.11.1a
Cisco IOS XE	=16.11.1b
Cisco IOS XE	=16.11.1c
Cisco IOS XE	=16.11.1s
Cisco IOS XE	=16.12.1y

Never miss a vulnerability like this again

Reference Links

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sip-Cv28sQw2

collector/nvd-index
agent/type
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/title
agent/weakness
agent/author
agent/severity
agent/references
agent/last-modified-date
agent/tags
agent/first-publish-date
agent/event
agent/description
vendor/cisco
canonical/cisco ios
version/cisco ios/15.0\(2\)sg11a
version/cisco ios/15.3\(3\)jaa1
version/cisco ios/15.3\(3\)jpi
version/cisco ios/15.3\(3\)jpj
version/cisco ios/15.3\(3\)m
version/cisco ios/15.3\(3\)m1
version/cisco ios/15.3\(3\)m2
version/cisco ios/15.3\(3\)m3
version/cisco ios/15.3\(3\)m4
version/cisco ios/15.3\(3\)m5
version/cisco ios/15.3\(3\)m6
version/cisco ios/15.3\(3\)m7
version/cisco ios/15.3\(3\)m8
version/cisco ios/15.3\(3\)m8a
version/cisco ios/15.3\(3\)m9
version/cisco ios/15.3\(3\)m10
version/cisco ios/15.3\(3\)xb12
version/cisco ios/15.4\(1\)cg
version/cisco ios/15.4\(1\)t
version/cisco ios/15.4\(1\)t1
version/cisco ios/15.4\(1\)t2
version/cisco ios/15.4\(1\)t3
version/cisco ios/15.4\(1\)t4
version/cisco ios/15.4\(2\)cg
version/cisco ios/15.4\(2\)t
version/cisco ios/15.4\(2\)t1
version/cisco ios/15.4\(2\)t2
version/cisco ios/15.4\(2\)t3
version/cisco ios/15.4\(2\)t4
version/cisco ios/15.4\(3\)m
version/cisco ios/15.4\(3\)m1
version/cisco ios/15.4\(3\)m2
version/cisco ios/15.4\(3\)m3
version/cisco ios/15.4\(3\)m4
version/cisco ios/15.4\(3\)m5
version/cisco ios/15.4\(3\)m6
version/cisco ios/15.4\(3\)m6a
version/cisco ios/15.4\(3\)m7
version/cisco ios/15.4\(3\)m7a
version/cisco ios/15.4\(3\)m8
version/cisco ios/15.4\(3\)m9
version/cisco ios/15.4\(3\)m10
version/cisco ios/15.5\(1\)t
version/cisco ios/15.5\(1\)t1
version/cisco ios/15.5\(1\)t2
version/cisco ios/15.5\(1\)t3
version/cisco ios/15.5\(1\)t4
version/cisco ios/15.5\(2\)t
version/cisco ios/15.5\(2\)t1
version/cisco ios/15.5\(2\)t2
version/cisco ios/15.5\(2\)t3
version/cisco ios/15.5\(2\)t4
version/cisco ios/15.5\(2\)xb
version/cisco ios/15.5\(3\)m
version/cisco ios/15.5\(3\)m1
version/cisco ios/15.5\(3\)m2
version/cisco ios/15.5\(3\)m2a
version/cisco ios/15.5\(3\)m3
version/cisco ios/15.5\(3\)m4
version/cisco ios/15.5\(3\)m4a
version/cisco ios/15.5\(3\)m4b
version/cisco ios/15.5\(3\)m4c
version/cisco ios/15.5\(3\)m5
version/cisco ios/15.5\(3\)m6
version/cisco ios/15.5\(3\)m6a
version/cisco ios/15.5\(3\)m7
version/cisco ios/15.5\(3\)m8
version/cisco ios/15.5\(3\)m9
version/cisco ios/15.5\(3\)m10
version/cisco ios/15.6\(1\)t
version/cisco ios/15.6\(1\)t0a
version/cisco ios/15.6\(1\)t1
version/cisco ios/15.6\(1\)t2
version/cisco ios/15.6\(1\)t3
version/cisco ios/15.6\(2\)t
version/cisco ios/15.6\(2\)t1
version/cisco ios/15.6\(2\)t2
version/cisco ios/15.6\(2\)t3
version/cisco ios/15.6\(3\)m
version/cisco ios/15.6\(3\)m0a
version/cisco ios/15.6\(3\)m1
version/cisco ios/15.6\(3\)m1a
version/cisco ios/15.6\(3\)m1b
version/cisco ios/15.6\(3\)m2
version/cisco ios/15.6\(3\)m2a
version/cisco ios/15.6\(3\)m3
version/cisco ios/15.6\(3\)m3a
version/cisco ios/15.6\(3\)m4
version/cisco ios/15.6\(3\)m5
version/cisco ios/15.6\(3\)m6
version/cisco ios/15.6\(3\)m6a
version/cisco ios/15.6\(3\)m7
version/cisco ios/15.7\(3\)m
version/cisco ios/15.7\(3\)m1
version/cisco ios/15.7\(3\)m2
version/cisco ios/15.7\(3\)m3
version/cisco ios/15.7\(3\)m4
version/cisco ios/15.7\(3\)m4a
version/cisco ios/15.7\(3\)m4b
version/cisco ios/15.8\(3\)m
version/cisco ios/15.8\(3\)m0a
version/cisco ios/15.8\(3\)m1
version/cisco ios/15.8\(3\)m2
canonical/cisco ios xe
version/cisco ios xe/3.10.0s
version/cisco ios xe/3.10.1s
version/cisco ios xe/3.10.2as
version/cisco ios xe/3.10.2s
version/cisco ios xe/3.10.2ts
version/cisco ios xe/3.10.3s
version/cisco ios xe/3.10.4s
version/cisco ios xe/3.10.5s
version/cisco ios xe/3.10.6s
version/cisco ios xe/3.10.7s
version/cisco ios xe/3.10.8as
version/cisco ios xe/3.10.8s
version/cisco ios xe/3.10.9s
version/cisco ios xe/3.10.10s
version/cisco ios xe/3.11.0s
version/cisco ios xe/3.11.1s
version/cisco ios xe/3.11.2s
version/cisco ios xe/3.11.3s
version/cisco ios xe/3.11.4s
version/cisco ios xe/3.12.0as
version/cisco ios xe/3.12.0s
version/cisco ios xe/3.12.1s
version/cisco ios xe/3.12.2s
version/cisco ios xe/3.12.3s
version/cisco ios xe/3.12.4s
version/cisco ios xe/3.13.0s
version/cisco ios xe/3.13.1s
version/cisco ios xe/3.13.2as
version/cisco ios xe/3.13.2s
version/cisco ios xe/3.13.3s
version/cisco ios xe/3.13.4s
version/cisco ios xe/3.13.5as
version/cisco ios xe/3.13.5s
version/cisco ios xe/3.13.6as
version/cisco ios xe/3.13.6bs
version/cisco ios xe/3.13.6s
version/cisco ios xe/3.13.7as
version/cisco ios xe/3.13.7s
version/cisco ios xe/3.13.8s
version/cisco ios xe/3.13.9s
version/cisco ios xe/3.13.10s
version/cisco ios xe/3.14.0s
version/cisco ios xe/3.14.1s
version/cisco ios xe/3.14.2s
version/cisco ios xe/3.14.3s
version/cisco ios xe/3.14.4s
version/cisco ios xe/3.15.0s
version/cisco ios xe/3.15.1cs
version/cisco ios xe/3.15.1s
version/cisco ios xe/3.15.2s
version/cisco ios xe/3.15.3s
version/cisco ios xe/3.15.4s
version/cisco ios xe/3.16.0cs
version/cisco ios xe/3.16.0s
version/cisco ios xe/3.16.1as
version/cisco ios xe/3.16.1s
version/cisco ios xe/3.16.2bs
version/cisco ios xe/3.16.2s
version/cisco ios xe/3.16.3s
version/cisco ios xe/3.16.4as
version/cisco ios xe/3.16.4bs
version/cisco ios xe/3.16.4cs
version/cisco ios xe/3.16.4ds
version/cisco ios xe/3.16.4es
version/cisco ios xe/3.16.4gs
version/cisco ios xe/3.16.5as
version/cisco ios xe/3.16.5bs
version/cisco ios xe/3.16.5s
version/cisco ios xe/3.16.6bs
version/cisco ios xe/3.16.6s
version/cisco ios xe/3.16.7as
version/cisco ios xe/3.16.7bs
version/cisco ios xe/3.16.7s
version/cisco ios xe/3.16.8s
version/cisco ios xe/3.16.9s
version/cisco ios xe/3.16.10s
version/cisco ios xe/3.17.0s
version/cisco ios xe/3.17.1as
version/cisco ios xe/3.17.1s
version/cisco ios xe/3.17.2s
version/cisco ios xe/3.17.3s
version/cisco ios xe/3.17.4s
version/cisco ios xe/3.18.0as
version/cisco ios xe/3.18.1asp
version/cisco ios xe/3.18.1sp
version/cisco ios xe/3.18.2asp
version/cisco ios xe/3.18.3asp
version/cisco ios xe/3.18.3bsp
version/cisco ios xe/3.18.3sp
version/cisco ios xe/3.18.4sp
version/cisco ios xe/3.18.5sp
version/cisco ios xe/3.18.6sp
version/cisco ios xe/16.2.1
version/cisco ios xe/16.2.2
version/cisco ios xe/16.3.1
version/cisco ios xe/16.3.1a
version/cisco ios xe/16.3.2
version/cisco ios xe/16.3.3
version/cisco ios xe/16.3.4
version/cisco ios xe/16.3.5
version/cisco ios xe/16.3.6
version/cisco ios xe/16.3.7
version/cisco ios xe/16.3.8
version/cisco ios xe/16.3.9
version/cisco ios xe/16.4.1
version/cisco ios xe/16.4.2
version/cisco ios xe/16.4.3
version/cisco ios xe/16.5.1
version/cisco ios xe/16.5.1b
version/cisco ios xe/16.5.2
version/cisco ios xe/16.5.3
version/cisco ios xe/16.6.1
version/cisco ios xe/16.6.2
version/cisco ios xe/16.6.3
version/cisco ios xe/16.6.4
version/cisco ios xe/16.6.4s
version/cisco ios xe/16.6.5
version/cisco ios xe/16.6.5b
version/cisco ios xe/16.6.6
version/cisco ios xe/16.7.1
version/cisco ios xe/16.7.1a
version/cisco ios xe/16.7.1b
version/cisco ios xe/16.7.2
version/cisco ios xe/16.7.3
version/cisco ios xe/16.7.4
version/cisco ios xe/16.8.1
version/cisco ios xe/16.8.1a
version/cisco ios xe/16.8.1c
version/cisco ios xe/16.8.1d
version/cisco ios xe/16.8.1e
version/cisco ios xe/16.8.1s
version/cisco ios xe/16.8.2
version/cisco ios xe/16.8.3
version/cisco ios xe/16.9.1
version/cisco ios xe/16.9.1a
version/cisco ios xe/16.9.1s
version/cisco ios xe/16.9.2
version/cisco ios xe/16.9.2s
version/cisco ios xe/16.9.3
version/cisco ios xe/16.9.3s
version/cisco ios xe/16.9.4
version/cisco ios xe/16.10.1
version/cisco ios xe/16.10.1a
version/cisco ios xe/16.10.1b
version/cisco ios xe/16.10.1c
version/cisco ios xe/16.10.1d
version/cisco ios xe/16.10.1e
version/cisco ios xe/16.10.1f
version/cisco ios xe/16.10.1g
version/cisco ios xe/16.10.1s
version/cisco ios xe/16.10.2
version/cisco ios xe/16.11.1
version/cisco ios xe/16.11.1a
version/cisco ios xe/16.11.1b
version/cisco ios xe/16.11.1c
version/cisco ios xe/16.11.1s
version/cisco ios xe/16.12.1y

CVE-2020-3226: Cisco IOS and IOS XE Software Session Initiation Protocol Denial of Service Vulnerability

Never miss a vulnerability like this again

Reference Links

Company

Resources

Contact