CVE-2018-0325 Denial of service in Cisco IP Phone 7800 Series and 8800 Series
Remote attackers can cause denial of service on Cisco IP phones by sending malformed SIP packets, dropping active calls and restarting the SIP process.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-0325?
CVE-2018-0325 is a high-severity denial of service vulnerability in Cisco IP Phone 7800 Series and 8800 Series, published on 17 May 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability in the Session Initiation Protocol (SIP) call-handling functionality of Cisco IP Phone 7800 Series phones and Cisco IP Phone 8800 Series phones could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected phone. The vulnerability is due to incomplete input validation of SIP Session Description Protocol (SDP) parameters by the SDP parser of an affected phone. An attacker could exploit this vulnerability by sending a malformed SIP packet to an affected phone. A successful exploit could allow the attacker to cause all active phone calls on the affected phone to be dropped while the SIP process on the phone unexpectedly restarts, resulting in a DoS condition. Cisco Bug IDs: CSCvf40066.
Weakness: CWE-20
Which versions are affected by CVE-2018-0325?
It affects 2 products.
Products include Cisco Ip Phone 7800 Firmware, Cisco Ip Phone 8800 Firmware.
How do I fix CVE-2018-0325?
No fix has been published for CVE-2018-0325 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2018-0325 being exploited?
There is no known exploitation of CVE-2018-0325 in the wild and no public exploit code.
Other vulnerabilities in Cisco IP Phone 7800 Series and 8800 Series
Sources
Also known as GHSA-hpxq-c7m9-w2gj.