Field Notice: FN - 72266 - Cisco BroadWorks Network, WebRTC, and Service Control Function Servers 2021.09_1.221 Uncaught Exception if SRTP is Received - Workaround Provided

Notice

THIS FIELD NOTICE IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTY OF MERCHANTABILITY. YOUR USE OF THE INFORMATION ON THE FIELD NOTICE OR MATERIALS LINKED FROM THE FIELD NOTICE IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS FIELD NOTICE AT ANY TIME.

Revision History

Revision	Publish Date	Comments
1.0	28-Oct-21	Initial Release

Products Affected

Affected OS Type	Affected Software Product	Affected Release	Affected Release Number	Comments
NON-IOS	Base Software	RI	RI.2021.09	Cisco BroadWorks Release Independent

Defect Information

Defect ID	Headline
CSCvz95717	2021.10 Release Independent Server tracking ticket

Problem Description

An Uncaught Exception NoClassDefFoundError occurs if the Session Initiation Protocol (SIP) message that contains the crypto attribute in its Software-Defined Perimeter (SDP) body is logged via the SIP input channel.

Background

These servers do not have a common library path required to receive and process a Secure Real-Time Transport Protocol (SRTP) SDP:

• Cisco BroadWorks Network Server (NS) 2021.09_1.221
• Cisco BroadWorks WebRTC Server (WRS) - 2021.09_1.221
• Cisco BroadWorks Service Control Function Server (SCF) - 2021.09_1.221

Problem Symptom

If the NS, WRS, or SCF receives SRTP in the SDP, it is possible for an Uncaught Exception error to be generated which can eventually lead to an outage.

Full Exception

[nsExecution] UNCAUGHT EXCEPTION in thread SipRedirectSessionManager (inputAdapter/rtQueryManager) thread #2
Message:org/apache/commons/codec/digest/DigestUtils
STACK TRACE:
java.lang.NoClassDefFoundError: org/apache/commons/codec/digest/DigestUtils
        at com.broadsoft.protocols.sip.SipMessageUtility.obfuscateSrtpKey(SipMessageUtility.java:1937)
        at com.broadsoft.protocols.sip.SipMessageUtility.obfuscateSrtpKeyFromString(SipMessageUtility.java:1922)
        at com.broadsoft.io.sip.SipInputChannel.buildLog(SipInputChannel.java:245)
        at com.broadsoft.io.sip.SipInputChannel.buildLog(SipInputChannel.java:220)
        at com.broadsoft.routingserver.apm.session.RSSipRedirectionSession.deliverEvent(RSSipRedirectionSession.java:292)
        at com.broadsoft.apm.session.InputAdapter.distributeEvent(InputAdapter.java:128)
        at com.broadsoft.apm.session.SimpleQAdapter.processInput(SimpleQAdapter.java:264)
        at com.broadsoft.apm.session.SimpleQAdapter.processInput(SimpleQAdapter.java:28)
        at com.broadsoft.util.watchdog.WatchedThread.run(WatchedThread.java:374)
        at java.lang.Thread.run(Thread.java:748)
Caused by: java.lang.ClassNotFoundException: org.apache.commons.codec.digest.DigestUtils
        at java.net.URLClassLoader.findClass(URLClassLoader.java:382)
        at java.lang.ClassLoader.loadClass(ClassLoader.java:419)
        at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:365)
        at java.lang.ClassLoader.loadClass(ClassLoader.java:352)
        ... 10 more

Healthmon Signature

System Health Report Page
   Cisco BroadWorks Server Name: hs2-bwks-v-ns01-alpha
   Date and time               : Mon Oct 11 13:01:03 EDT 2021
   Locale                      : LANG = en_US.UTF-8
   Report severity             : NOTIFICATION
   Server type                 : NetServer
   Server state                : Unlock
--------------------------------------
Uncaught Exception found in logs for NSExecutionAndProvisioning : nsExecution 

Workaround/Solution

Workaround

Roll back to the earlier server version:

• WRS_Rel_2021.06_1.190
• SCF_Rel_2021.08_1.130
• NS_Rel_2021.08_1.130

As an alternative to a rollback or an upgrade to a later version, you can disable the SipInputChannel logs.

Solution

You can also upgrade to a later server version:

• SCF_Rel_2021.09_1.222
• NS_Rel_2021.09_1.222

Note: An upgrade for the WRS version is not available at the time of this field notice publication.

For More Information

If you require further assistance, or if you have any further questions regarding this field notice, please contact the Cisco Systems Technical Assistance Center (TAC) by one of the following methods:

• Open a service request on Cisco.com
• By email or telephone

Receive Email Notification For New Field Notices

My Notifications—Set up a profile to receive email updates about reliability, safety, network security, and end-of-sale issues for the Cisco products you specify.