[c-nsp] Cisco Security Advisory: Cisco Videoscape Delivery System Denial of Service Vulnerability

Cisco Systems Product Security Incident Response Team psirt at cisco.com
Wed Jul 15 12:24:55 EDT 2015


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Cisco Security Advisory: Cisco Videoscape Delivery System Denial of Service Vulnerability

Advisory ID: cisco-sa-20150715-vds

Revision 1.0

For Public Release 2015 July 15 16:00  UTC (GMT)

+---------------------------------------------------------------------

Summary
=======

A vulnerability in the HTTP processing module of the Cisco Videoscape Distribution Suite for Internet Streaming (VDS-IS) and Cisco Videoscape Distribution Suite Service Broker (VDS-SB) could allow an unauthenticated, remote attacker to cause a reload of the affected device.

The vulnerability is due to improper input validation. An attacker could exploit this vulnerability by sending a crafted HTTP request to a vulnerable device. An exploit could allow the attacker to cause a denial of service (DoS) condition.

There is no workaround that mitigates this vulnerability.

Cisco has released software updates that address this vulnerability for Cisco VDS-IS.

This advisory is available at the following link:
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150715-vds
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - https://gpgtools.org
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=C2Ta
-----END PGP SIGNATURE-----


More information about the cisco-nsp mailing list