CVEvulnerability
CVE-2009-0635
7.1 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-03-27
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.1 HIGH — AV:N/AC:M/Au:N/C:N/I:N/A:C
- Weaknesses
- CWE-399
Description
Memory leak in the Cisco Tunneling Control Protocol (cTCP) encapsulation feature in Cisco IOS 12.4, when an Easy VPN (aka EZVPN) server is enabled, allows remote attackers to cause a denial of service (memory consumption and device crash) via a sequence of TCP packets.
Affected configurations
• cisco ios 12.4t
• cisco ios 12.4xz
• cisco ios 12.4ya
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/34438 Vendor Advisory
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90459.shtml Patch, Vendor Advisory
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtml Patch, Vendor Advisory
- http://www.securityfocus.com/bid/34246 www.securityfocus.com
- http://www.securitytracker.com/id?1021895 www.securitytracker.com
- http://www.vupen.com/english/advisories/2009/0851 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49417 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/34438 Vendor Advisory
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90459.shtml Patch, Vendor Advisory
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtml Patch, Vendor Advisory
- http://www.securityfocus.com/bid/34246 www.securityfocus.com
- http://www.securitytracker.com/id?1021895 www.securitytracker.com
- http://www.vupen.com/english/advisories/2009/0851 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49417 exchange.xforce.ibmcloud.com