CVE-2017-12311

Name: CVE-2017-12311
Creator: NVD / NIST
Published: 2017-11-16T07:29:00.6+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 2.20%

Last modified Jun 17, 2026

CVE-2017-12311 is a vulnerability of currently unknown severity. A vulnerability in the H.264 decoder function of Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a Cisco Meeting Server media process to restart unexpectedly when it receives an illegal H.264 frame. The vulnerability is triggered by an H.264 frame that has an invalid picture parameter set (PPS) value. EPSS estimates a 2.20% chance of exploitation in the next 30 days.

Description

A vulnerability in the H.264 decoder function of Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a Cisco Meeting Server media process to restart unexpectedly when it receives an illegal H.264 frame. The vulnerability is triggered by an H.264 frame that has an invalid picture parameter set (PPS) value. An attacker could exploit this vulnerability by sending a malformed H.264 frame to the targeted device. An exploit could allow the attacker to cause a denial of service (DoS) condition because the media process could restart. The media session should be re-established within a few seconds, during which there could be a brief interruption in service. Cisco Bug IDs: CSCvg12559.

Metrics

EPSS Probability

2.20%

80.2th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

Vendor	Product	Versions
Cisco	Meeting Server	2.0
Cisco	Meeting Server	2.1.0
Cisco	Meeting Server	2.2.0
Cisco	Meeting Server	2.3.0

References

http://www.securityfocus.com/bid/101855Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1039827Third Party Advisory, VDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-cmsVendor Advisory
http://www.securityfocus.com/bid/101855Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1039827Third Party Advisory, VDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-cmsVendor Advisory

Timeline

Published: Nov 16, 2017
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2017-12311?

How severe is CVE-2017-12311?

Severity scoring for CVE-2017-12311 is pending analysis. The EPSS model estimates a 2.20% probability of exploitation in the next 30 days.

How do I fix CVE-2017-12311?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2017-12311?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST