CVE-2011-2072

Related Files

Cisco Security Advisory 20110928-cucm

Posted Sep 28, 2011

Authored by Cisco Systems | Site cisco.com

Cisco Security Advisory - Cisco Unified Communications Manager contains a memory leak vulnerability that could be triggered through the processing of malformed Session Initiation Protocol (SIP) messages. Exploitation of this vulnerability could cause an interruption of voice services. Cisco has released free software updates for supported Cisco Unified Communications Manager versions to address the vulnerability. A workaround exists for this SIP vulnerability.

tags | advisory, protocol, memory leak

systems | cisco

advisories | CVE-2011-2072

SHA-256 | a5f1927958aa4c1612f94d0917d625ae14208a68fe421f75813a8f60c2bc9f7e

Download | Favorite | View

Cisco Security Advisory 20110928-sip

Posted Sep 28, 2011

Authored by Cisco Systems | Site cisco.com

Cisco Security Advisory - Multiple vulnerabilities exist in the Session Initiation Protocol (SIP) implementation in Cisco IOS Software and Cisco IOS XE Software that could allow an unauthenticated, remote attacker to cause a reload of an affected device or trigger memory leaks that may result in system instabilities. Affected devices would need to be configured to process SIP messages for these vulnerabilities to be exploitable. Cisco has released free software updates that address these vulnerabilities. There are no workarounds for devices that must run SIP; however, mitigations are available to limit exposure to the vulnerabilities.

tags | advisory, remote, vulnerability, protocol, memory leak

systems | cisco, osx

advisories | CVE-2011-0939, CVE-2011-2072, CVE-2011-3275

SHA-256 | 3e5c649daea98f2fca96808c0596078230f8dd81427f67c139229f5446d49360

Download | Favorite | View