What’s Vulnerable › Vulnerabilities

CVE-2005-3989

• Severity: high (CVSS 7.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2005-12-04 · updated 2026-06-16

Description

Memory leak in Avaya TN2602AP IP Media Resource 320 circuit pack before vintage 9 firmware allows remote attackers to cause a denial of service (memory consumption) via crafted VoIP packets.

Affected products

• Avaya Tn2602Ap Ip Media Resource 320 Circuit Pack: through vintage_8_firmware; vintage_3_firmware, vintage_4_firmware, vintage_5_firmware, vintage_6_firmware, vintage_7_firmware

References

• http://secunia.com/advisories/17825
• http://support.avaya.com/elmodocs2/security/ASA-2005-231.pdf
• http://www.securityfocus.com/bid/15668
• http://www.vupen.com/english/advisories/2005/2685
• http://secunia.com/advisories/17825
• http://support.avaya.com/elmodocs2/security/ASA-2005-231.pdf
• http://www.securityfocus.com/bid/15668
• http://www.vupen.com/english/advisories/2005/2685

Get alerted when CVE-2005-3989 or the next vulnerability affects your stack