Cisco TelePresence Video Communication Server (VCS) and Cisco Expressway allow remote attackers to cause a denial of service (memory and CPU consumption, and partial outage) via crafted SIP packets, aka Bug ID CSCur12473.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0579
Reference (s):
- BID:72057
- URL: http://www.securityfocus.com/bid/72057
- CISCO:20150113 Cisco TelePresence VCS and Expressway High CPU Utilization Vulnerability
- URL: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0579
- CISCO:20150115 Cisco TelePresence VCS and Expressway High CPU Utilization Vulnerability