CVE-2010-4687

STCAPP aka the SCCP telephony control application on Cisco IOS before 15.01XA1 does not properly handle multiple calls to a shared line, which allows remote attackers to cause a denial of service port hang by simultaneously ending two calls that were controlled by CallManager Express CME, aka Bug...

CVE-2009-5040

CVE-2009-5040 affects Cisco CallManager Express (CME) on Cisco IOS prior to 15.0(1)XA. The issue allows remote authenticated users to trigger a denial-of-service (device crash) by interacting with the SNR-number change menu using an Extension Mobility (EM) phone. Root cause is not detailed beyond...

CVE-2009-5039

Memory leak in the gkcircuitinfodoinacf function in the H.323 implementation in Cisco IOS before 15.01XA allows remote attackers to cause a denial of service memory consumption via a large number of calls over a long duration, as demonstrated by InterZone Clear Token IZCT test traffic, aka Bug ID...

CVE-2010-4687

CVE-2010-4687 affects Cisco STCAPP (the SCCP telephony control application) on Cisco IOS before 15.0(1)XA1. The issue is that it does not properly handle multiple calls on a shared line, allowing remote attackers to cause a denial of service (port hang) by ending two calls simultaneously that are...

CVE-2010-4683

Memory leak in Cisco IOS before 15.01XA5 might allow remote attackers to cause a denial of service memory consumption by sending a crafted SIP REGISTER message over UDP, aka Bug ID CSCtg41733...

CVE-2009-5040

CallManager Express CME on Cisco IOS before 15.01XA allows remote authenticated users to cause a denial of service device crash by using an extension mobility EM phone to interact with the menu for SNR number changes, aka Bug ID CSCta63555...

CVE-2009-5039

CVE-2009-5039 describes a memory leak in the H.323 implementation of Cisco IOS (function gk_circuit_info_do_in_acf) that can lead to denial of service via sustained, high-volume call traffic (IZCT test traffic). The cited Bug ID CSCsz72535 links the issue to Cisco IOS versions prior to 15.0(1)XA....

CVE-2010-4671

The Neighbor Discovery ND protocol implementation in the IPv6 stack in Cisco IOS before 15.01XA5 allows remote attackers to cause a denial of service CPU consumption and device hang by sending many Router Advertisement RA messages with different source addresses, as demonstrated by the floodroute...

Design/Logic Flaw

The Neighbor Discovery ND protocol implementation in the IPv6 stack in Cisco IOS before 15.01XA5 allows remote attackers to cause a denial of service CPU consumption and device hang by sending many Router Advertisement RA messages with different source addresses, as demonstrated by the floodroute...

PT-2011-1642

Name of the Vulnerable Software and Affected Versions Cisco IOS versions prior to 15.01XA1 Description The issue is related to the STCAPP application on Cisco IOS, which does not properly handle multiple calls to a shared line. This allows remote attackers to cause a denial of service by...

CVE-2009-5039: Missing Release of Resource after Effective Lifetime

Memory leak in the gkcircuitinfodoinacf function in the H.323 implementation in Cisco IOS before 15.01XA allows remote attackers to cause a denial of service memory consumption via a large number of calls over a long duration, as demonstrated by InterZone Clear Token IZCT test traffic, aka Bug ID...

CVE-2010-4685: Improper Certificate Validation

Cisco IOS before 15.01XA1 does not clear the public key cache upon a change to a certificate map, which allows remote authenticated users to bypass a certificate ban by connecting with a banned certificate that had previously been valid, aka Bug ID CSCta79031...

CVE-2009-5040: Undefined Security Weakness

CallManager Express CME on Cisco IOS before 15.01XA allows remote authenticated users to cause a denial of service device crash by using an extension mobility EM phone to interact with the menu for SNR number changes, aka Bug ID CSCta63555...

PT-2011-1309

Name of the Vulnerable Software and Affected Versions Cisco IOS versions prior to 15.01XA Description The issue is related to the handling of IRC traffic after an initial reload, allowing remote attackers to cause a denial of service via an attempted connection to a certain IRC server. This is du...

PT-2011-1310

Name of the Vulnerable Software and Affected Versions Cisco IOS versions prior to 15.01XA Description A memory leak in the H.323 implementation allows remote attackers to cause a denial of service due to memory consumption via a large number of calls over a long duration. Recommendations For...

PT-2011-1641

Name of the Vulnerable Software and Affected Versions Cisco IOS versions prior to 15.01XA1 Description The issue is related to the handling of SIP TRUNK traffic with rate bursts and a peculiar request size in CallManager Express CME on Cisco IOS. This allows remote attackers to cause a denial of...

PT-2011-1640

Name of the Vulnerable Software and Affected Versions Cisco IOS versions prior to 15.01XA1 Description The issue allows remote authenticated users to bypass a certificate ban by connecting with a banned certificate that had previously been valid. This occurs because the public key cache is not...

CVE-2010-4686: Uncontrolled Resource Consumption

CallManager Express CME on Cisco IOS before 15.01XA1 does not properly handle SIP TRUNK traffic that contains rate bursts and a "peculiar" request size, which allows remote attackers to cause a denial of service memory consumption by sending this traffic over a long duration, aka Bug ID CSCtb4795...

CVE-2010-4671: Uncontrolled Resource Consumption

The Neighbor Discovery ND protocol implementation in the IPv6 stack in Cisco IOS before 15.01XA5 allows remote attackers to cause a denial of service CPU consumption and device hang by sending many Router Advertisement RA messages with different source addresses, as demonstrated by the floodroute...

PT-2011-1639

Name of the Vulnerable Software and Affected Versions Cisco IOS versions prior to 15.01XA1 Description The issue allows remote attackers to cause a denial of service, resulting in a device crash, when certain TFTP debugging is enabled and a TFTP copy over IPv6 is performed. Recommendations For...