Resource Management Errors
CVE-2011-4019
Summary
Memory leak in Cisco IOS 12.4 and 15.0 through 15.2, and Cisco Unified Communications Manager (CUCM) 7.x, allows remote attackers to cause a denial of service (memory consumption) via a crafted response to a SIP SUBSCRIBE message, aka Bug IDs CSCto93837 and CSCtj61883.
- HIGH
- NETWORK
- NONE
- NONE
- NONE
- COMPLETE
CWE-399 - Resource Management Errors
Resource management errors is not a weakness in and of itself, rather it is a category of weaknesses related to improper management of system resources. If not addressed, the weaknesses in this category can lead to unexpected software behavior, loss of access, file modification, sensitive information disclosure, system crash, denial of service, and code execution.
References
Advisory Timeline
- Published