CVE-2016-6384 Cisco IOS Software H.323 Message Validation Denial of Service Vulnerability(cisco-sa-20160928-h323)

A vulnerability in the H.323 subsystem of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to create a denial of service (DoS) condition on an affected device.
The vulnerability is due to a failure to properly validate certain fields in an H.323 protocol suite message.

When processing the malicious message, the affected device may attempt to access an invalid memory region, resulting in a crash. An attacker who can submit an H.323 packet designed to trigger the vulnerability could cause the affected device to crash and restart.

Refer to Cisco advisory cisco-sa-20160928-h323 for updates and patch information.

Patch:
Following are links for downloading patches to fix the vulnerabilities:

cisco-sa-20160928-h323: Cisco IOS