CVE-2011-2072

Cisco IOS 12.4, 15.0, 15.1; IOS XE 2.5.x-3.2.x; Unified CM < 7.1(5b)su4, 8.5(1)su2, 8.6(1) - DoS via Malformed SIP

Title source: llm

Description

Memory leak in Cisco IOS 12.4, 15.0, and 15.1, Cisco IOS XE 2.5.x through 3.2.x, and Cisco Unified Communications Manager (CUCM) 6.x and 7.x before 7.1(5b)su4, 8.x before 8.5(1)su2, and 8.6 before 8.6(1) allows remote attackers to cause a denial of service (memory consumption and device reload or process failure) via a malformed SIP message, aka Bug IDs CSCtl86047 and CSCto88686.

References (5)

Core 5

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1026110

Vendor Advisory vendor-advisory x_refsource_cisco

http://www.cisco.com/en/US/products/products_security_advisory09186a0080b95d58.shtml

Vendor Advisory vendor-advisory x_refsource_cisco

http://www.cisco.com/en/US/products/products_security_advisory09186a0080b95d5a.shtml

Various Sources vendor-advisory x_refsource_cisco

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20110928-cucm

Various Sources x_refsource_confirm

http://tools.cisco.com/security/center/viewAlert.x?alertId=24129

Scores

EPSS 0.0170

EPSS Percentile 74.8%

Details

CWE

CWE-399

Status published

Products (50)

cisco/ios 12.4

cisco/ios 15.0

cisco/ios 15.1

cisco/ios_xe 2.5.0

cisco/ios_xe 2.5.1

cisco/ios_xe 2.5.2

cisco/ios_xe 2.6.0

cisco/ios_xe 2.6.1

cisco/ios_xe 2.6.2

cisco/ios_xe 3.1.0s

... and 40 more

Published Oct 03, 2011

Tracked Since Feb 18, 2026