CVE:CVE-2017-12219
CNNVD:CNNVD-201709-1038
Cisco Small Business SPA300、SPA500和SPA51x都是美国思科（Cisco）公司的S系列的IP电话产品。
Cisco Small Business SPA300、SPA500和SPA51x系列IP电话中的处理IP分片的过程存在拒绝服务漏洞，该漏洞源于程序没有处理较大的IP分片。远程攻击者可通过向受影响的设备发送特制的IP分片流利用该漏洞造成拒绝服务。
solution:Upgrade cisco spa_301_firmware to a higher version than 7.6.2,and avoid the version 7.6.2; Upgrade cisco spa_303_firmware to a higher version than 7.6.2,and avoid the version 7.6.2; Upgrade cisco spa_500ds_firmware to a higher version than 7.6.2,and avoid the version 7.6.2; Upgrade cisco spa_500s_firmware to a higher version than 7.6.2,and avoid the version 7.6.2; Upgrade cisco spa_501g_firmware to a higher version than 7.6.2,and avoid the version 7.6.2; Upgrade cisco spa_502g_firmware to a higher version than 7.6.2,and avoid the version 7.6.2; Upgrade cisco spa_504g_firmware to a higher version than 7.6.2,and avoid the version 7.6.2; Upgrade cisco spa_508g_firmware to a higher version than 7.6.2,and avoid the version 7.6.2; Upgrade cisco spa_509g_firmware to a higher version than 7.6.2,and avoid the version 7.6.2; Upgrade cisco spa_512g_firmware to a higher version than 7.6.2,and avoid the version 7.6.2; Upgrade cisco spa_514g_firmware to a higher version than 7.6.2,and avoid the version 7.6.2