CVE-2011-2561

Published Aug 29, 2011 CVSS 2.0 · 7.1 High EPSS 1.1% KEV · Not listed
Description
The SIP process in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 7.x before 7.1(5b)su4 and 8.x before 8.0(1) does not properly handle SDP data within a SIP call in certain situations related to use of the g729ar8 codec for a Media Termination Point (MTP), which allows remote attackers to cause a denial of service (service outage) via a crafted call, aka Bug ID CSCtc61990.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2011-2544 The SIP process in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 7.x before 7.1(5b)su4 and 8.x before 8.0(1) does not properly handle SDP data within a SIP call in certain situations related to use of the g729ar8 codec for a Media Termination Point (MTP), which allows remote attackers to cause a denial of service (service outage) via a crafted call, aka Bug ID CSCtc61990.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
cisco
Published
Updated
Sep 17, 2024, 12:11 AM
Reserved
Jun 27, 2011, 12:00 AM
Status
Modified
Published
Aug 29, 2011, 3:55 PM
Modified
Jun 16, 2026, 11:31 PM