CVE-2011-2560

Опубликовано: 29 авг. 2011

Источник: nvd

CVSS2: 7.8

EPSS Низкий

Описание

The Packet Capture Service in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x does not properly handle idle TCP connections, which allows remote attackers to cause a denial of service (memory consumption and restart) by making many connections, aka Bug ID CSCtf97162.

Ссылки

http://www.cisco.com/en/US/products/products_security_advisory09186a0080b8f531.shtml
Vendor Advisory
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b8f531.shtml
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cisco:unified_communications_manager:4.1\(3\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:4.1\(3\)sr1:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:4.1\(3\)sr2:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:4.1\(3\)sr3:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:4.1\(3\)sr4:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:4.2:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:4.2.1:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:4.2.2:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:4.2.3:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:4.2.3sr1:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:4.2.3sr2:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:4.2.3sr2b:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:4.3:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_communications_manager:4.3\(1\):*:*:*:*:*:*:*

EPSS

Процентиль: 62%

0.00427

Низкий

7.8 High

CVSS2

Дефекты

CWE-399

Связанные уязвимости

GHSA-gg52-3mfc-r5cw

github

больше 3 лет назад