—–BEGIN PGP SIGNED MESSAGE—–
Hash: SHA512
Cisco Security Advisory: Cisco Videoscape Delivery System Denial of Service Vulnerability
Advisory ID: cisco-sa-20150715-vds
Revision 1.0
For Public Release 2015 July 15 16:00 UTC (GMT)
+———————————————————————
Summary
=======
A vulnerability in the HTTP processing module of the Cisco Videoscape Distribution Suite for Internet Streaming (VDS-IS) and Cisco Videoscape Distribution Suite Service Broker (VDS-SB) could allow an unauthenticated, remote attacker to cause a reload of the affected device.
The vulnerability is due to improper input validation. An attacker could exploit this vulnerability by sending a crafted HTTP request to a vulnerable device. An exploit could allow the attacker to cause a denial of service (DoS) condition.
There is no workaround that mitigates this vulnerability.
Cisco has released software updates that address this vulnerability for Cisco VDS-IS.
This advisory is available at the following link:
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150715-vds
—–BEGIN PGP SIGNATURE—–
Comment: GPGTools – https://gpgtools.org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=C2Ta
—–END PGP SIGNATURE—–
_______________________________________________
cust-security-announce mailing list
cust-security-announce@cisco.com
To unsubscribe, send the command “unsubscribe” in the subject of your message to cust-security-announce-leave@cisco.com
