| CNNVD-ID编号 | CNNVD-201909-1122 | CVE编号 | CVE-2019-12654 |
| 发布时间 | 2019-09-25 | 更新时间 | 2019-10-17 |
| 漏洞类型 | 代码问题 | 漏洞来源 | The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory. |
| 危险等级 | 高危 | 威胁类型 | 远程 |
| 厂商 | N/A | ||
Cisco IOS和IOS XE都是美国思科（Cisco）公司的一套为其网络设备开发的操作系统。
Cisco IOS和IOS XE中的common Session Initiation Protocol (SIP)库存在代码问题漏洞，该漏洞源于程序没有对内部数据结构进行可用性测试。远程攻击者可通过发送恶意的SIP消息利用该漏洞造成空指针逆向引用，导致iosd进程崩溃。以下产品及版本受到影响：Cisco Unified Border Element (CUBE)；Unified Communications Manager Express (CME)；IOS Gateways with Session Initiation Protocol (SIP)；TDM Gateways；Unified Survivable Remote Site Telephony (SRST)；Business Edition 4000 (BE4K)。
目前厂商已发布升级了Cisco IOS和IOS XE 代码问题漏洞的补丁，Cisco IOS和IOS XE 代码问题漏洞的补丁获取链接：
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190925-sip-dos
来源:tools.cisco.com
链接：https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190925-sbxss
来源:tools.cisco.com
链接：https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190925-identd-dos
来源:http-client
链接：http-client
来源:tools.cisco.com
链接：https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190925-tsec
来源:nvd.nist.gov
来源:vigilance.fr
链接：https://vigilance.fr/vulnerability/Cisco-IOS-IOS-XE-denial-of-service-via-SIP-30441
来源:www.auscert.org.au
暂无
计算
安全
数据库
网络和加速
企业服务
