CVE-2008-1743

Опубликовано: 16 мая 2008

Источник: nvd

CVSS2: 7.8

EPSS Низкий

Описание

Memory leak in the Certificate Trust List (CTL) Provider service in Cisco Unified Communications Manager (CUCM) 5.x before 5.1(3) and 6.x before 6.1(1) allows remote attackers to cause a denial of service (memory consumption and service interruption) via a series of malformed TCP packets, aka Bug ID CSCsi98433.

Ссылки

http://secunia.com/advisories/30238
Third Party Advisory
http://securitytracker.com/id?1020022
Third Party Advisory
VDB Entry
http://www.cisco.com/en/US/products/products_security_advisory09186a0080995688.shtml
Vendor Advisory
http://www.securityfocus.com/bid/29221
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2008/1533
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/42414
Third Party Advisory
VDB Entry
http://secunia.com/advisories/30238
Third Party Advisory
http://securitytracker.com/id?1020022
Third Party Advisory
VDB Entry
http://www.cisco.com/en/US/products/products_security_advisory09186a0080995688.shtml
Vendor Advisory
http://www.securityfocus.com/bid/29221
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2008/1533
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/42414
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*

Версия от 5.0 (включая) до 5.1\(3\) (исключая)

cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*

Версия от 6.0 (включая) до 6.1\(1\) (исключая)

EPSS

Процентиль: 82%

0.01626

Низкий

7.8 High

CVSS2

Дефекты

CWE-399

Связанные уязвимости

GHSA-vcf6-rqgx-fhj7

github

почти 4 года назад