CVE-2018-0325

N/A

A vulnerability in the Session Initiation Protocol (SIP) call-handling functionality of Cisco IP Phone 7800 Series phones and Cisco IP Phone 8800 Series phones could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected phone. The vulnerability is due to incomplete input validation of SIP Session Description Protocol (SDP) parameters by the SDP parser of an affected phone. An attacker could exploit this vulnerability by sending a malformed SIP packet to an affected phone. A successful exploit could allow the attacker to cause all active phone calls on the affected phone to be dropped while the SIP process on the phone unexpectedly restarts, resulting in a DoS condition. Cisco Bug IDs: CSCvf40066.

N/A

输入验证不恰当

Cisco IP Phone 7800 Series和Cisco IP Phone 8800 Series 输入验证漏洞

Cisco IP Phone 7800 Series和Cisco IP Phone 8800 Series都是美国思科（Cisco）公司的不同系列的提供视频和VoIP通信功能的电话产品。 Cisco IP Phone 7800 Series和Cisco IP Phone 8800 Series中的Session Initiation Protocol (SIP)通话处理功能存在输入验证漏洞，该漏洞源于SDP解析器没有充分的对SIP Session Description Protocol (SDP)参数执

N/A

N/A