Cisco IOS NAT Functionality Session Initiation Protocol Denial of Service Vulnerability

Bugtraq ID:	43393
Class:	Unknown
CVE:	CVE-2010-2831
Remote:	Yes
Local:	No
Published:	Sep 22 2010 12:00AM
Updated:	Sep 22 2010 12:00AM
Credit:	Cisco
Vulnerable:	Cisco IOS 15.1XB Cisco IOS 15.1T Cisco IOS 15.0XO Cisco IOS 15.0XA Cisco IOS 15.0S Cisco IOS 15.0M Cisco IOS 12.4YG Cisco IOS 12.4YE Cisco IOS 12.4YD Cisco IOS 12.4YB Cisco IOS 12.4YA Cisco IOS 12.4XZ Cisco IOS 12.4XY Cisco IOS 12.4XW Cisco IOS 12.4XV Cisco IOS 12.4XT Cisco IOS 12.4XR Cisco IOS 12.4XQ Cisco IOS 12.4XP Cisco IOS 12.4XN Cisco IOS 12.4XM Cisco IOS 12.4XL Cisco IOS 12.4XK Cisco IOS 12.4XJ Cisco IOS 12.4XG Cisco IOS 12.4XF Cisco IOS 12.4XE Cisco IOS 12.4XD Cisco IOS 12.4XC Cisco IOS 12.4XB Cisco IOS 12.4XA Cisco IOS 12.4T Cisco IOS 12.4SW Cisco IOS 12.4MRA Cisco IOS 12.4MR Cisco IOS 12.4MDA Cisco IOS 12.4MD Cisco IOS 12.4GC Cisco IOS 12.4 Cisco IOS 12.3ZA Cisco IOS 12.3YZ Cisco IOS 12.3YX Cisco IOS 12.3YU Cisco IOS 12.3YT Cisco IOS 12.3YS Cisco IOS 12.3YQ Cisco IOS 12.3YM Cisco IOS 12.3YK Cisco IOS 12.3YJ Cisco IOS 12.3YI Cisco IOS 12.3YH Cisco IOS 12.3YG Cisco IOS 12.3YF Cisco IOS 12.3YD Cisco IOS 12.3YA Cisco IOS 12.3XZ Cisco IOS 12.3XX Cisco IOS 12.3XW Cisco IOS 12.3XU Cisco IOS 12.3XS Cisco IOS 12.3XR Cisco IOS 12.3XQ Cisco IOS 12.3XL Cisco IOS 12.3XK Cisco IOS 12.3XJ Cisco IOS 12.3XI Cisco IOS 12.3XG Cisco IOS 12.3XF Cisco IOS 12.3XE Cisco IOS 12.3XD Cisco IOS 12.3XC Cisco IOS 12.3XA Cisco IOS 12.3VA Cisco IOS 12.3TPC Cisco IOS 12.3T Cisco IOS 12.3JK Cisco IOS 12.2ZYA Cisco IOS 12.2ZY Cisco IOS 12.2ZU Cisco IOS 12.2ZL Cisco IOS 12.2XNF Cisco IOS 12.2XNE Cisco IOS 12.2XND Cisco IOS 12.2XNC Cisco IOS 12.2XNB Cisco IOS 12.2XNA Cisco IOS 12.2XN Cisco IOS 12.2SY Cisco IOS 12.2SXF Cisco IOS 12.2SXE Cisco IOS 12.2SXD Cisco IOS 12.2SXB Cisco IOS 12.2SXA Cisco IOS 12.2SX Cisco IOS 12.2SW Cisco IOS 12.2SV Cisco IOS 12.2SRE Cisco IOS 12.2SG Cisco IOS 12.2SCD Cisco IOS 12.2SCC Cisco IOS 12.2SCB Cisco IOS 12.2SBC Cisco IOS 12.2S Cisco IOS 12.2MRB Cisco IOS 12.2MRA Cisco IOS 12.2IXH Cisco IOS 12.2IXG Cisco IOS 12.2IXF Cisco IOS 12.2IXE Cisco IOS 12.2IXD Cisco IOS 12.2IXC Cisco IOS 12.2IXB Cisco IOS 12.2IXA Cisco IOS 12.2IRE Cisco IOS 12.2IRD Cisco IOS 12.2IRC Cisco IOS 12.2IRB Cisco IOS 12.2IRA Cisco IOS 12.2EX Cisco IOS 12.2 Cisco IOS 12.1
Not Vulnerable:	Cisco IOS XE 2.6.2 Cisco IOS 15.1(2)T1 Cisco IOS 15.0(1)M3 Cisco IOS 12.3(8)JK1 Cisco IOS 12.3(7)XI11 Cisco IOS 12.3(2)JK3 Cisco IOS 12.3(14)YX17 Cisco IOS 12.2SE Cisco IOS 12.2SB Cisco IOS 12.2(40)SG Cisco IOS 12.2(33)SCD4 Cisco IOS 12.2(33)SCD3 Cisco IOS 12.2(33)SCC5 Cisco IOS 12.2(33)SCB9 Cisco IOS 12.2(33)MRB2 Cisco IOS 12.2(30)S Cisco IOS 12.2(25)SW12 Cisco IOS 12.2(18)SXF11 Cisco IOS 12.2(14)SX2

Cisco IOS NAT Functionality Session Initiation Protocol Denial of Service Vulnerability

Cisco IOS is prone to a remote denial-of-service vulnerability.

An attacker can exploit these issues to cause an affected device to crash, denying service to legitimate users.

This issue is being tracked by Cisco Bug ID CSCtf17624.

Cisco IOS NAT Functionality Session Initiation Protocol Denial of Service Vulnerability

To exploit this issue, attackers can use readily available network utilities.

Cisco IOS NAT Functionality Session Initiation Protocol Denial of Service Vulnerability

Solution:
The vendor has released updates. Please see the referenced advisory for more information.

Cisco IOS NAT Functionality Session Initiation Protocol Denial of Service Vulnerability

References:

• Cisco Homepage (Cisco )
  
• Cisco Security Advisory: Cisco IOS Software Network Address Translation Vulnera (Cisco Systems Product Security Incident Response Team)
  
• Cisco Security Advisory: Cisco IOS Software Network Address Translation Vulnerab (Cisco)