CVE-2010-0583
published 2010-03-25CVE-2010-0583: Memory leak in the H.323 implementation in Cisco IOS 12.1 through 12.4, and 15.0M before 15.0(1)M1, allows remote attackers to cause a denial of service…
PriorityP434high7.8CVSS 2.0
AVNACLAuNCNINAC
EPSS
3.00%
85.9th percentile
Memory leak in the H.323 implementation in Cisco IOS 12.1 through 12.4, and 15.0M before 15.0(1)M1, allows remote attackers to cause a denial of service (memory consumption and device reload) via malformed H.323 packets, aka Bug ID CSCtb93855.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
CVSS provenance
nvdv2.07.8HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C
vendor_cisco7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-xv9p-fx29-877q: Memory leak in the H
ghsa_unreviewed·2022-05-02
CVE-2010-0583 [HIGH] GHSA-xv9p-fx29-877q: Memory leak in the H
Memory leak in the H.323 implementation in Cisco IOS 12.1 through 12.4, and 15.0M before 15.0(1)M1, allows remote attackers to cause a denial of service (memory consumption and device reload) via malformed H.323 packets, aka Bug ID CSCtb93855.
Cisco
Cisco IOS Software H.323 Denial of Service Vulnerabilities
vendor_cisco·2010-03-24·CVSS 7.8
CVE-2010-0582 [HIGH] CWE-399 Cisco IOS Software H.323 Denial of Service Vulnerabilities
Cisco IOS Software H.323 Denial of Service Vulnerabilities
The H.323 implementation in Cisco IOS Software contains two
vulnerabilities that may be exploited remotely to cause a denial of service
(DoS) condition on a device that is running a vulnerable version of Cisco IOS
Software.
Cisco has released software updates that address these vulnerabilities. There are no workarounds to mitigate these vulnerabilities
other than disabling H.323 on the vulnerable device if H.323 is not
required.
This advisory is posted at
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20100324-h323.
Note: The March 24, 2010, Cisco IOS Software Security Advisory bundled
publication includes seven Security Advisories. All the advisories address
vulnerabilities in Cisco IOS S
Cisco
Cisco IOS Software H.323 Denial of Service Vulnerabilities
vendor_cisco
CVE-2010-0583 Cisco IOS Software H.323 Denial of Service Vulnerabilities
CVE-2010-0583: Cisco IOS Software H.323 Denial of Service Vulnerabilities
The H.323 implementation in Cisco IOS Software contains two vulnerabilities that may be exploited remotely to cause a denial of service (DoS) condition on a device that is running a vulnerable version of Cisco IOS Software. Cisco has released software updates that address these vulnerabilities. There are no
CWE: CWE-399, CWE-399
Bug IDs: CSCta19962, CSCtb93855, CSCta19962, CSCtb93855
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://osvdb.org/63181http://secunia.com/advisories/39067http://www.cisco.com/en/US/products/products_security_advisory09186a0080b20ee4.shtmlhttp://www.securityfocus.com/bid/38934http://www.securitytracker.com/id?1023742http://www.vupen.com/english/advisories/2010/0706https://exchange.xforce.ibmcloud.com/vulnerabilities/57140http://osvdb.org/63181http://secunia.com/advisories/39067http://www.cisco.com/en/US/products/products_security_advisory09186a0080b20ee4.shtmlhttp://www.securityfocus.com/bid/38934http://www.securitytracker.com/id?1023742http://www.vupen.com/english/advisories/2010/0706https://exchange.xforce.ibmcloud.com/vulnerabilities/57140
2010-03-25
Published