Vulnerability Description
Memory leak in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5)su3, 7.x before 7.1(5b)su3, 8.0 before 8.0(3a)su2, and 8.5 before 8.5(1) allows remote attackers to cause a denial of service (memory consumption and process failure) via a malformed SIP message, aka Bug ID CSCti42904.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Unified Communications Manager | 6.0 |
Related Weaknesses (CWE)
References
- http://archives.neohapsis.com/archives/fulldisclosure/2011-05/0051.html
- http://secunia.com/advisories/44331
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b79904.sVendor Advisory
- http://www.securityfocus.com/bid/47609
- http://www.securitytracker.com/id?1025449
- http://www.vupen.com/english/advisories/2011/1122
- https://exchange.xforce.ibmcloud.com/vulnerabilities/67122
- http://archives.neohapsis.com/archives/fulldisclosure/2011-05/0051.html
- http://secunia.com/advisories/44331
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b79904.sVendor Advisory
- http://www.securityfocus.com/bid/47609
- http://www.securitytracker.com/id?1025449
- http://www.vupen.com/english/advisories/2011/1122
- https://exchange.xforce.ibmcloud.com/vulnerabilities/67122
FAQ
What is CVE-2011-1604?
CVE-2011-1604 is a vulnerability with a CVSS score of 7.1 (HIGH). Memory leak in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5)su3, 7.x before 7.1(5b)su3, 8.0 before 8.0(3a)su2, and 8.5 before 8.5(1) allows remote attackers t...
How severe is CVE-2011-1604?
CVE-2011-1604 has been rated HIGH with a CVSS base score of 7.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2011-1604?
Check the references section above for vendor advisories and patch information. Affected products include: Cisco Unified Communications Manager.