CVE-2011-1604
published 2011-05-03CVE-2011-1604: Memory leak in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5)su3, 7.x before 7.1(5b)su3, 8.0 before 8.0(3a)su2, and…
PriorityP429high7.1CVSS 2.0
AVNACMAuNCNINAC
EPSS
2.51%
83.1th percentile
Memory leak in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5)su3, 7.x before 7.1(5b)su3, 8.0 before 8.0(3a)su2, and 8.5 before 8.5(1) allows remote attackers to cause a denial of service (memory consumption and process failure) via a malformed SIP message, aka Bug ID CSCti42904.
Affected
48 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | unified_communications_manager | — | — |
| cisco | unified_communications_manager | — | — |
| cisco | unified_communications_manager | — | — |
| cisco | unified_communications_manager | — | — |
| cisco | unified_communications_manager | — | — |
| cisco | unified_communications_manager | — | — |
| cisco | unified_communications_manager | — | — |
| cisco | unified_communications_manager | — | — |
| cisco | unified_communications_manager | — | — |
| cisco | unified_communications_manager | — | — |
| cisco | unified_communications_manager | — | — |
| cisco | unified_communications_manager | — | — |
| cisco | unified_communications_manager | — | — |
| cisco | unified_communications_manager | — | — |
| cisco | unified_communications_manager | — | — |
| cisco | unified_communications_manager | — | — |
| cisco | unified_communications_manager | — | — |
| cisco | unified_communications_manager | — | — |
| cisco | unified_communications_manager | — | — |
| cisco | unified_communications_manager | — | — |
| cisco | unified_communications_manager | — | — |
| cisco | unified_communications_manager | — | — |
| cisco | unified_communications_manager | — | — |
| cisco | unified_communications_manager | — | — |
| cisco | unified_communications_manager | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Multiple Vulnerabilities in Cisco Unified Communications Manager
vendor_cisco
CVE-2011-1604 Multiple Vulnerabilities in Cisco Unified Communications Manager
CVE-2011-1604: Multiple Vulnerabilities in Cisco Unified Communications Manager
Cisco Unified Communications Manager (previously known as Cisco CallManager) contains the following vulnerabilities: Three (3) denial of service (DoS) vulnerabilities that affect Session Initiation Protocol (SIP) services Directory transversal vulnerability Two (2) SQL injection vulnerabilities Cisco has released free software updates for affected Cisco Unified Communications Manager versions to address the vulnerabilities. A workaround exists only for the SIP DoS vulnerabilities. This advisory is posted at https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20110427-cucm .
Bug IDs: CSCti42904, CSCth39586, CSCtg62855, CSCti81603, CSCtg85647
GHSA
GHSA-fhvf-2vjr-3jh6: Memory leak in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6
ghsa_unreviewed·2022-05-17
CVE-2011-1604 [HIGH] GHSA-fhvf-2vjr-3jh6: Memory leak in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6
Memory leak in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5)su3, 7.x before 7.1(5b)su3, 8.0 before 8.0(3a)su2, and 8.5 before 8.5(1) allows remote attackers to cause a denial of service (memory consumption and process failure) via a malformed SIP message, aka Bug ID CSCti42904.
No detection rules found.
No writeups or analysis indexed.
http://archives.neohapsis.com/archives/fulldisclosure/2011-05/0051.htmlhttp://secunia.com/advisories/44331http://www.cisco.com/en/US/products/products_security_advisory09186a0080b79904.shtmlhttp://www.securityfocus.com/bid/47609http://www.securitytracker.com/id?1025449http://www.vupen.com/english/advisories/2011/1122https://exchange.xforce.ibmcloud.com/vulnerabilities/67122http://archives.neohapsis.com/archives/fulldisclosure/2011-05/0051.htmlhttp://secunia.com/advisories/44331http://www.cisco.com/en/US/products/products_security_advisory09186a0080b79904.shtmlhttp://www.securityfocus.com/bid/47609http://www.securitytracker.com/id?1025449http://www.vupen.com/english/advisories/2011/1122https://exchange.xforce.ibmcloud.com/vulnerabilities/67122
2011-05-03
Published