CVE-2011-0941

Cisco Unified Communications Manager 6.x-8.5 - Denial of Service via Malformed SIP Message

Title source: llm

Description

Memory leak in Cisco Unified Communications Manager (CUCM) 6.x before 6.1(5)su2, 7.x before 7.1(5b)su3, 8.x before 8.0(3a)su1, and 8.5 before 8.5(1), and Cisco IOS 12.4 and 15.1, allows remote attackers to cause a denial of service (memory consumption and process failure or device reload) via a malformed SIP message, aka Bug IDs CSCti75128 and CSCtj09179.

References (2)

Core 2

Core References

Various Sources x_refsource_confirm

http://tools.cisco.com/security/center/viewAlert.x?alertId=24525

Vendor Advisory vendor-advisory x_refsource_cisco

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20110928-cucm

Scores

EPSS 0.0121

EPSS Percentile 65.2%

Details

CWE

CWE-399

Status published

Products (50)

cisco/ios 12.4

cisco/ios 15.1

cisco/unified_communications_manager 6.0

cisco/unified_communications_manager 6.1\(1\)

cisco/unified_communications_manager 6.1\(1a\)

cisco/unified_communications_manager 6.1\(1b\)

cisco/unified_communications_manager 6.1\(2\)

cisco/unified_communications_manager 6.1\(2\)su1

cisco/unified_communications_manager 6.1\(2\)su1a

cisco/unified_communications_manager 6.1\(3\)

... and 40 more

Published Nov 01, 2011

Tracked Since Feb 18, 2026