SB2017012602 - Buffer overflow in Cisco TelePresence MCU

Description

This security bulletin contains information about 1 security vulnerability.

1) Buffer overflow (CVE-ID: CVE-2017-3792)

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to boundary error within device driver in the kernel of Cisco TelePresence Multipoint Control Unit (MCU) Software when reassembling fragmented IPv4 and IPv6 packets. A remote unauthenticated attacker can send a series of specially crafted fragmented IPv4 or IPv6 packets to a port receiving content in Passthrough content mode, trigger buffer overflow and execute arbitrary code on the target system or cause denial of service.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Remediation

Install update from vendor's website.

References

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170125-telepresence