CVEvulnerability
CVE-2011-2072
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-10-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:N/A:C
- Weaknesses
- CWE-399
Description
Memory leak in Cisco IOS 12.4, 15.0, and 15.1, Cisco IOS XE 2.5.x through 3.2.x, and Cisco Unified Communications Manager (CUCM) 6.x and 7.x before 7.1(5b)su4, 8.x before 8.5(1)su2, and 8.6 before 8.6(1) allows remote attackers to cause a denial of service (memory consumption and device reload or process failure) via a malformed SIP message, aka Bug IDs CSCtl86047 and CSCto88686.
Affected configurations
• cisco ios 12.4
• cisco ios 15.0
• cisco ios 15.1
• cisco ios xe 2.5.0
• cisco ios xe 2.5.1
• cisco ios xe 2.5.2
• cisco ios xe 2.6.0
• cisco ios xe 2.6.1
• cisco ios xe 2.6.2
• cisco ios xe 3.1.0s
• cisco ios xe 3.1.1s
• cisco ios xe 3.1.2s
• cisco ios xe 3.1.3s
• cisco ios xe 3.1.4s
• cisco ios xe 3.2.0s
• cisco ios xe 3.2.1s
• cisco ios xe 3.2.2s
• cisco unified communications manager 6.0
• cisco unified communications manager 6.1\(1\)
• cisco unified communications manager 6.1\(1a\)
• cisco unified communications manager 6.1\(1b\)
• cisco unified communications manager 6.1\(2\)
• cisco unified communications manager 6.1\(2\)su1
• cisco unified communications manager 6.1\(2\)su1a
• cisco unified communications manager 6.1\(3\)
• cisco unified communications manager 6.1\(3a\)
• cisco unified communications manager 6.1\(3b\)
• cisco unified communications manager 6.1\(3b\)su1
• cisco unified communications manager 6.1\(4\)
• cisco unified communications manager 6.1\(4\)su1
• cisco unified communications manager 6.1\(4a\)
• cisco unified communications manager 6.1\(4a\)su2
• cisco unified communications manager 6.1\(5\)
• cisco unified communications manager 6.1\(5\)su1
• cisco unified communications manager 6.1\(5\)su2
• cisco unified communications manager 7.0\(1\)su1
• cisco unified communications manager 7.0\(1\)su1a
• cisco unified communications manager 7.0\(2\)
• cisco unified communications manager 7.0\(2a\)
• cisco unified communications manager 7.0\(2a\)su1
• cisco unified communications manager 7.0\(2a\)su2
• cisco unified communications manager 7.1\(2a\)
• cisco unified communications manager 7.1\(2a\)su1
• cisco unified communications manager 7.1\(2b\)
• cisco unified communications manager 7.1\(2b\)su1
• cisco unified communications manager 7.1\(3\)
• cisco unified communications manager 7.1\(3a\)
• cisco unified communications manager 7.1\(3a\)su1
• cisco unified communications manager 7.1\(3a\)su1a
• cisco unified communications manager 7.1\(3b\)
• cisco unified communications manager 7.1\(3b\)su1
• cisco unified communications manager 7.1\(3b\)su2
• cisco unified communications manager 7.1\(5\)
• cisco unified communications manager 7.1\(5\)su1
• cisco unified communications manager 7.1\(5\)su1a
• cisco unified communications manager 7.1\(5a\)
• cisco unified communications manager 7.1\(5b\)
• cisco unified communications manager 7.1\(5b\)su1
• cisco unified communications manager 7.1\(5b\)su1a
• cisco unified communications manager 7.1\(5b\)su2
… and 14 more
Related
Weakness · not in database (1)
References
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20110928-cucm tools.cisco.com
- http://tools.cisco.com/security/center/viewAlert.x?alertId=24129 tools.cisco.com
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b95d58.shtml Vendor Advisory
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b95d5a.shtml Vendor Advisory
- http://www.securitytracker.com/id?1026110 www.securitytracker.com
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20110928-cucm tools.cisco.com
- http://tools.cisco.com/security/center/viewAlert.x?alertId=24129 tools.cisco.com
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b95d58.shtml Vendor Advisory
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b95d5a.shtml Vendor Advisory
- http://www.securitytracker.com/id?1026110 www.securitytracker.com