CVE-2011-2561

Cisco Unified Communications Manager 7.x-8.x - Denial of Service via Crafted SIP Call with g729ar8 Codec

Title source: llm
STIX 2.1

Description

The SIP process in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 7.x before 7.1(5b)su4 and 8.x before 8.0(1) does not properly handle SDP data within a SIP call in certain situations related to use of the g729ar8 codec for a Media Termination Point (MTP), which allows remote attackers to cause a denial of service (service outage) via a crafted call, aka Bug ID CSCtc61990.

References (1)

Core 1
Core References

Scores

EPSS 0.0106
EPSS Percentile 61.0%

Details

CWE
CWE-399
Status published
Products (27)
cisco/unified_communications_manager 7.0\(1\)su1
cisco/unified_communications_manager 7.0\(1\)su1a
cisco/unified_communications_manager 7.0\(2\)
cisco/unified_communications_manager 7.0\(2a\)
cisco/unified_communications_manager 7.0\(2a\)su1
cisco/unified_communications_manager 7.0\(2a\)su2
cisco/unified_communications_manager 7.1\(2a\)
cisco/unified_communications_manager 7.1\(2a\)su1
cisco/unified_communications_manager 7.1\(2b\)
cisco/unified_communications_manager 7.1\(2b\)su1
... and 17 more
Published Aug 29, 2011
Tracked Since Feb 18, 2026