PT-2012-1785 · Cisco · Cisco Ios+1

Published 2012-05-03 · Updated 2012-05-30 · CVE-2011-4019

Positive Technologies (AI Summary)

CVSS v2.0

5.4

Medium

Base vector

AV:N/AC:H/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.4 and 15.0 through 15.2 Cisco Unified Communications Manager (CUCM) version 7.x

Description A memory leak issue allows remote attackers to cause a denial of service by consuming memory via a crafted response to a SIP SUBSCRIBE message.

Recommendations For Cisco IOS versions 12.4 and 15.0 through 15.2, update to a version that includes the fix for Bug IDs CSCto93837 and CSCtj61883. For Cisco Unified Communications Manager (CUCM) version 7.x, update to a version that includes the fix for Bug IDs CSCto93837 and CSCtj61883.

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2011-4019

Affected Products

Cisco Ios

Cisco Unified Communications Manager

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2011-4019 · Security Note
• http://cisco.com/web/software/282074295/90289/cucm-readme-715bsu5.pdf · Note
• http://cisco.com/en/US/docs/ios/15_1/release/notes/151TCAVS.html · Note