Memory corruption in Cisco Videoscape Distribution Suite Cache Server
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-119 and the CVSS impact.
Summary
A vulnerability in the cache server within Cisco Videoscape Distribution Suite (VDS) for Television 3.2(5)ES1 could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on a targeted appliance. The vulnerability is due to excessive mapped connections exhausting the allotted resources within the system. An attacker could exploit this vulnerability by sending large amounts of inbound traffic to a device with the intention of overloading certain resources. A successful exploit could cause the device to reload, resulting in a DoS condition. Cisco Bug IDs: CSCvc39260.
Why it matters now
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | Cisco Videoscape Distribution Suite Cache Server | Cisco Videoscape Distribution Suite Cache Server | — | No fix listed | CNA |
- Cisco Videoscape Distribution Suite Cache Server Vendor— Affected Cisco Videoscape Distribution Suite Cache Server Fixed in — No fix listed CNA
CPE configurations NVD · 17
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:cisco:videoscape_distribution_suite_for_television:3.2\(5\)es1:*:*:*:*:*:*:* | 3.2(5)es1 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:videoscape_distribution_suite_for_television:3.2\(6\):*:*:*:*:*:*:* | 3.2(6) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:videoscape_distribution_suite_for_television:3.2\(7\):*:*:*:*:*:*:* | 3.2(7) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:videoscape_distribution_suite_for_television:3.3\(1\):*:*:*:*:*:*:* | 3.3(1) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:videoscape_distribution_suite_for_television:3.4\(1\):*:*:*:*:*:*:* | 3.4(1) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:videoscape_distribution_suite_for_television:3.4\(2\):*:*:*:*:*:*:* | 3.4(2) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:videoscape_distribution_suite_for_television:3.5\(1\):*:*:*:*:*:*:* | 3.5(1) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:videoscape_distribution_suite_for_television:3.5\(1\)-cos:*:*:*:*:*:*:* | 3.5(1)-cos | Vulnerable | Cisco |
| cpe:2.3:a:cisco:videoscape_distribution_suite_for_television:3.6\(1\):*:*:*:*:*:*:* | 3.6(1) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:videoscape_distribution_suite_for_television:3.8\(1\):*:*:*:*:*:*:* | 3.8(1) | Vulnerable | Cisco |
- cpe:2.3:a:cisco:videoscape_distribution_suite_for_television:3.2\(5\)es1:*:*:*:*:*:*:* Versions 3.2(5)es1 Vulnerable ·Cisco
- cpe:2.3:a:cisco:videoscape_distribution_suite_for_television:3.2\(6\):*:*:*:*:*:*:* Versions 3.2(6) Vulnerable ·Cisco
- cpe:2.3:a:cisco:videoscape_distribution_suite_for_television:3.2\(7\):*:*:*:*:*:*:* Versions 3.2(7) Vulnerable ·Cisco
- cpe:2.3:a:cisco:videoscape_distribution_suite_for_television:3.3\(1\):*:*:*:*:*:*:* Versions 3.3(1) Vulnerable ·Cisco
- cpe:2.3:a:cisco:videoscape_distribution_suite_for_television:3.4\(1\):*:*:*:*:*:*:* Versions 3.4(1) Vulnerable ·Cisco
- cpe:2.3:a:cisco:videoscape_distribution_suite_for_television:3.4\(2\):*:*:*:*:*:*:* Versions 3.4(2) Vulnerable ·Cisco
- cpe:2.3:a:cisco:videoscape_distribution_suite_for_television:3.5\(1\):*:*:*:*:*:*:* Versions 3.5(1) Vulnerable ·Cisco
- cpe:2.3:a:cisco:videoscape_distribution_suite_for_television:3.5\(1\)-cos:*:*:*:*:*:*:* Versions 3.5(1)-cos Vulnerable ·Cisco
- cpe:2.3:a:cisco:videoscape_distribution_suite_for_television:3.6\(1\):*:*:*:*:*:*:* Versions 3.6(1) Vulnerable ·Cisco
- cpe:2.3:a:cisco:videoscape_distribution_suite_for_television:3.8\(1\):*:*:*:*:*:*:* Versions 3.8(1) Vulnerable ·Cisco
Show 7 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:cisco:videoscape_distribution_suite_for_television:3.9\(1\):*:*:*:*:*:*:* | 3.9(1) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:videoscape_distribution_suite_for_television:4.1\(2\):*:*:*:*:*:*:* | 4.1(2) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:videoscape_distribution_suite_for_television:4.1\(3\):*:*:*:*:*:*:* | 4.1(3) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:videoscape_distribution_suite_for_television:4.1\(4\):*:*:*:*:*:*:* | 4.1(4) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:videoscape_distribution_suite_for_television:4.1\(5\):*:*:*:*:*:*:* | 4.1(5) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:videoscape_distribution_suite_for_television:4.2\(1\):*:*:*:*:*:*:* | 4.2(1) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:videoscape_distribution_suite_for_television:4.4\(1\):*:*:*:*:*:*:* | 4.4(1) | Vulnerable | Cisco |
- cpe:2.3:a:cisco:videoscape_distribution_suite_for_television:3.9\(1\):*:*:*:*:*:*:* Versions 3.9(1) Vulnerable ·Cisco
- cpe:2.3:a:cisco:videoscape_distribution_suite_for_television:4.1\(2\):*:*:*:*:*:*:* Versions 4.1(2) Vulnerable ·Cisco
- cpe:2.3:a:cisco:videoscape_distribution_suite_for_television:4.1\(3\):*:*:*:*:*:*:* Versions 4.1(3) Vulnerable ·Cisco
- cpe:2.3:a:cisco:videoscape_distribution_suite_for_television:4.1\(4\):*:*:*:*:*:*:* Versions 4.1(4) Vulnerable ·Cisco
- cpe:2.3:a:cisco:videoscape_distribution_suite_for_television:4.1\(5\):*:*:*:*:*:*:* Versions 4.1(5) Vulnerable ·Cisco
- cpe:2.3:a:cisco:videoscape_distribution_suite_for_television:4.2\(1\):*:*:*:*:*:*:* Versions 4.2(1) Vulnerable ·Cisco
- cpe:2.3:a:cisco:videoscape_distribution_suite_for_television:4.4\(1\):*:*:*:*:*:*:* Versions 4.4(1) Vulnerable ·Cisco
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2017-6745
- 2026-10-03 Alias added: GHSA-9m5j-cgjg-vr9r
References
Sources
- CVE-2017-6745 · CVE Program
- CVE-2017-6745 · NVD
- FIRST EPSS
- GHSA-9m5j-cgjg-vr9r · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences