Cisco Unity Connection 'SIP Trunk Integration' Multiple Denial of Service Vulnerabilities

Bugtraq ID:	73476
Class:	Design Error
CVE:	CVE-2015-0612 CVE-2015-0613 CVE-2015-0614 CVE-2015-0615 CVE-2015-0616
Remote:	Yes
Local:	No
Published:	Apr 01 2015 12:00AM
Updated:	Apr 01 2015 12:00AM
Credit:	Cisco
Vulnerable:	Cisco Unity Connection 9.1(2) Cisco Unity Connection 9.1(1) Cisco Unity Connection 9.0(1) Cisco Unity Connection 9.0 Cisco Unity Connection 8.6(2a) Cisco Unity Connection 8.6(2) Cisco Unity Connection 8.6(1a) Cisco Unity Connection 8.6 (2A)Su3 Cisco Unity Connection 8.6 (2A)Su2 Cisco Unity Connection 8.6 (2A)Su1 Cisco Unity Connection 8.6 (1) Cisco Unity Connection 8.6 Cisco Unity Connection 8.5(1)SU6 Cisco Unity Connection 8.5(1)SU5 Cisco Unity Connection 8.5(1)SU4 Cisco Unity Connection 8.5(1)SU3 Cisco Unity Connection 8.5(1)SU2 Cisco Unity Connection 8.5(1)SU1 Cisco Unity Connection 8.5(1) Cisco Unity Connection 8.5 Cisco Unity Connection 10.5 Cisco Unity Connection 10.0
Not Vulnerable:	Cisco Unity Connection 9.1(2)SU2 Cisco Unity Connection 8.6(2a)SU4 Cisco Unity Connection 8.5(1)SU7 Cisco Unity Connection 10.0(1)SU1

Cisco Unity Connection 'SIP Trunk Integration' Multiple Denial of Service Vulnerabilities

Cisco Unity Connection is prone to multiple denial-of-service vulnerabilities.

An attacker can exploit these issues to cause denial of service condition.

These issues are being tracked by Cisco Bug IDs CSCuh25062, CSCul20444, CSCul26267, CSCul28089, CSCul69819.

Cisco Unity Connection 'SIP Trunk Integration' Multiple Denial of Service Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Cisco Unity Connection 'SIP Trunk Integration' Multiple Denial of Service Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco Unity Connection 'SIP Trunk Integration' Multiple Denial of Service Vulnerabilities

References:

• Cisco Homepage (Cisco )
  
• Cisco Unity Connection SIP Trunk Integration Crafted INVITE Message Denial of Se (Cisco)
  
• Cisco Unity Connection SIP Trunk Integration Crafted INVITE Message Denial of Se (Cisco)
  
• Cisco Unity Connection SIP Trunk Integration CuCsMgr Denial of Service Vulnerabi (Cisco)
  
• Cisco Unity Connection SIP Trunk Integration Port UDP 5060 Denial of Service Vul (Cisco)
  
• Cisco Unity Connection SIP Trunk Integration Ports Busy Denial of Service Vulner (Cisco)
  
• Multiple Vulnerabilities in Cisco Unity Connection (Cisco)