CVE-2008-1743
Memory leak in the Certificate Trust List (CTL) Provider service in Cisco Unified Communications Manager (CUCM) 5.x before 5.1(3) and 6.x before 6.1(1) allows remote attackers to cause a denial of service (memory consumption and service interruption)…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (1.50%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Memory leak in the Certificate Trust List (CTL) Provider service in Cisco Unified Communications Manager (CUCM) 5.x before 5.1(3) and 6.x before 6.1(1) allows remote attackers to cause a denial of service (memory consumption and service interruption) via a series of malformed TCP packets, aka Bug ID CSCsi98433.
- CVSS 2.0
- 7.8 HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C
- EPSS
- 1.50% probability · 73th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-399
- Affected
- cisco/unified communications manager
- Source
- psirt@cisco.com
References
- http://secunia.com/advisories/30238Third Party Advisory
- http://securitytracker.com/id?1020022Third Party Advisory, VDB Entry
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080995688.shtmlVendor Advisory
- http://www.securityfocus.com/bid/29221Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2008/1533Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42414Third Party Advisory, VDB Entry
- http://secunia.com/advisories/30238Third Party Advisory
- http://securitytracker.com/id?1020022Third Party Advisory, VDB Entry
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080995688.shtmlVendor Advisory
- http://www.securityfocus.com/bid/29221Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2008/1533Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42414Third Party Advisory, VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.