CVE-2019-1676

A vulnerability in the Session Initiation Protocol (SIP) call processing of Cisco Meeting Server (CMS) software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition of the Cisco Meeting Server. The vulnerability is due to insufficient validation of Session Description Protocol (SDP) messages. An attacker could exploit this vulnerability by sending a crafted SDP message to the CMS call bridge. An exploit could allow the attacker to cause the CMS to reload, causing a DoS condition for all connected clients. Versions prior to 2.3.9 are affected.

• CWE-20
• CWE-20

• http://www.securityfocus.com/bid/106909Third Party Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190206-meeting-sipdosVendor Advisory
• http://www.securityfocus.com/bid/106909Third Party Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190206-meeting-sipdosVendor Advisory

Published

Feb 8, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-16752An issue was discovered in Decentralized Anonymous Payment S…4.3
• CVE-2019-16753An issue was discovered in Decentralized Anonymous Payment S…7.5
• CVE-2019-16754RIOT 2019.07 contains a NULL pointer dereference in the MQTT…7.5
• CVE-2019-16755BMC Remedy ITSM Suite is prone to unspecified vulnerabilitie…9.8
• CVE-2019-16758In Lexmark Services Monitor 2.27.4.0.39 (running on TCP port…7.5
• CVE-2019-16759vBulletin 5.x through 5.5.4 allows remote command execution …9.8
• CVE-2019-16760Cargo prior to Rust 1.26.0 may download the wrong dependency…7.5
• CVE-2019-16761A specially crafted Bitcoin script can cause a discrepancy b…6.1
• CVE-2019-16762A specially crafted Bitcoin script can cause a discrepancy b…6.1
• CVE-2019-16763In Pannellum from 2.5.0 through 2.5.4 URLs were not sanitize…6.1
• CVE-2019-16764The use of `String.to_atom/1` in PowAssent is susceptible to…5.5
• CVE-2019-16765If an attacker can get a user to open a specially prepared d…7.8