CVE-2019-1678

A vulnerability in Cisco Meeting Server could allow an authenticated, remote attacker to cause a partial denial of service (DoS) to Cisco Meetings application users who are paired with a Session Initiation Protocol (SIP) endpoint. The vulnerability is due to improper validation of coSpaces configuration parameters. An attacker could exploit this vulnerability by inserting crafted strings in specific coSpace parameters. An exploit could allow the attacker to prevent clients from joining a conference call in the affected coSpace. Versions prior to 2.4.3 are affected.

• CWE-20
• CWE-20

• http://www.securityfocus.com/bid/106943Broken Link, Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190206-cms-dosVendor Advisory
• http://www.securityfocus.com/bid/106943Broken Link, Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190206-cms-dosVendor Advisory

Published

Feb 7, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-16774In phpfastcache before 5.1.3, there is a possible object inj…9.8
• CVE-2019-16775Versions of the npm CLI prior to 6.13.3 are vulnerable to an…6.5
• CVE-2019-16776Versions of the npm CLI prior to 6.13.3 are vulnerable to an…8.1
• CVE-2019-16777Versions of the npm CLI prior to 6.13.4 are vulnerable to an…6.5
• CVE-2019-16778In TensorFlow before 1.15, a heap buffer overflow in Unsorte…9.8
• CVE-2019-16779In RubyGem excon before 0.71.0, there was a race condition a…5.9
• CVE-2019-16780WordPress users with lower privileges (like contributors) ca…5.4
• CVE-2019-16781In WordPress before 5.3.1, authenticated users with lower pr…5.4
• CVE-2019-16782There's a possible information leak / session hijack vulnera…5.9
• CVE-2019-16784In PyInstaller before version 3.6, only on Windows, a local …7.8
• CVE-2019-16785Waitress through version 1.3.1 implemented a "MAY" part of t…7.5
• CVE-2019-16786Waitress through version 1.3.1 would parse the Transfer-Enco…7.5