CVE-2015-4226
Cisco Unified IP Phones 9900 Series Firmware 9.3(2) - Denial of Service via Malformed RTP Packets
Title source: llmDescription
The packet-storing feature on Cisco 9900 phones with firmware 9.3(2) does not properly support the RTP protocol, which allows remote attackers to cause a denial of service (device hang) by sending malformed RTP packets after a call is answered, aka Bug ID CSCur39976.
References (3)
Core 3
Core References
Vendor Advisory vendor-advisory
x_refsource_cisco
http://tools.cisco.com/security/center/viewAlert.x?alertId=39554
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1032748
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/75471
Scores
EPSS
0.0277
EPSS Percentile
84.8%
Details
CWE
CWE-399
Status
published
Products (1)
cisco/unified_ip_phones_9900_series_firmware
9.3\(2\)
Published
Jun 30, 2015
Tracked Since
Feb 18, 2026