Description
Memory leak in Cisco IOS 12.4 and 15.0 through 15.2, and Cisco Unified Communications Manager (CUCM) 7.x, allows remote attackers to cause a denial of service (memory consumption) via a crafted response to a SIP SUBSCRIBE message, aka Bug IDs CSCto93837 and CSCtj61883.
References (2)
Core 2
Core References
Vendor Advisory x_refsource_confirm
http://www.cisco.com/web/software/282074295/90289/cucm-readme-715bsu5.pdf
Release Notes x_refsource_confirm
http://www.cisco.com/en/US/docs/ios/15_1/release/notes/151TCAVS.html
Scores
EPSS
0.0113
EPSS Percentile
63.0%
Details
CWE
CWE-399
Status
published
Products (37)
cisco/ios
12.4
cisco/ios
15.0
cisco/ios
15.1
cisco/ios
15.2
cisco/unified_communications_manager
7.0
cisco/unified_communications_manager
7.0\(1\)
cisco/unified_communications_manager
7.0\(1\)su1
cisco/unified_communications_manager
7.0\(1\)su1a
cisco/unified_communications_manager
7.0\(2\)
cisco/unified_communications_manager
7.0\(2a\)
... and 27 more
Published
May 03, 2012
Tracked Since
Feb 18, 2026