bugtraq - Cisco Security Advisory: Cisco Videoscape Delivery System Denial of Service Vulnerability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [day] [month] [year] [list]

Message-id: <201507151224.6.vds@psirt.cisco.com>
Date: Wed, 15 Jul 2015 12:24:55 -0400
From: Cisco Systems Product Security Incident Response Team <psirt@...co.com>
To: bugtraq@...urityfocus.com
Cc: psirt@...co.com
Subject: Cisco Security Advisory: Cisco Videoscape Delivery System Denial of Service Vulnerability

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Cisco Security Advisory: Cisco Videoscape Delivery System Denial of Service Vulnerability

Advisory ID: cisco-sa-20150715-vds

Revision 1.0

For Public Release 2015 July 15 16:00  UTC (GMT)

+---------------------------------------------------------------------

Summary
=======

A vulnerability in the HTTP processing module of the Cisco Videoscape Distribution Suite for Internet Streaming (VDS-IS) and Cisco Videoscape Distribution Suite Service Broker (VDS-SB) could allow an unauthenticated, remote attacker to cause a reload of the affected device.

The vulnerability is due to improper input validation. An attacker could exploit this vulnerability by sending a crafted HTTP request to a vulnerable device. An exploit could allow the attacker to cause a denial of service (DoS) condition.

There is no workaround that mitigates this vulnerability.

Cisco has released software updates that address this vulnerability for Cisco VDS-IS.

This advisory is available at the following link:
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150715-vds
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - https://gpgtools.org
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=C2Ta
-----END PGP SIGNATURE-----