CVE-2005-1021 — Missing Release of Memory after Effective Lifetime in Cisco IOS

CWE-3994 documents3 sources
Severity
7.1HIGHNVD
EPSS
1.4%
top 19.55%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Cisco IOSCisco IOS Secure Shell Server
Timeline
PublishedMay 2
Latest updateMay 1

Description

Memory leak in Secure Shell (SSH) in Cisco IOS 12.0 through 12.3, when authenticating against a TACACS+ server, allows remote attackers to cause a denial of service (memory consumption) via an incorrect username or password.

CVSS vector

AV:N/AC:M/C:N/I:N/A:CExploitability: 8.6 | Impact: 6.9

Affected Packages2 packages

▶NVDcisco/ios93 versions+92

Patches

Patch: secunia.com ↗Patch: www.securitytracker.com ↗Patch: secunia.com ↗

🔴Vulnerability Details

1
GHSA
GHSA-phww-46gm-5fww: Memory leak in Secure Shell (SSH) in Cisco IOS 12↗2022-05-01
▶

📋Vendor Advisories

2
Cisco
Vulnerabilities in Cisco IOS Secure Shell Server↗2005-04-06
▶
Cisco
Vulnerabilities in Cisco IOS Secure Shell Server↗
▶