CVE-2011-0941

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2011-11-01 · updated 2026-06-16
Weakness: CWE-399

Description

Memory leak in Cisco Unified Communications Manager (CUCM) 6.x before 6.1(5)su2, 7.x before 7.1(5b)su3, 8.x before 8.0(3a)su1, and 8.5 before 8.5(1), and Cisco IOS 12.4 and 15.1, allows remote attackers to cause a denial of service (memory consumption and process failure or device reload) via a malformed SIP message, aka Bug IDs CSCti75128 and CSCtj09179.

Affected products

Cisco IOS: 12.4, 15.1
Cisco Unified Communications Manager: 6.0, 6.1(1), 6.1(1a), 6.1(1b), 6.1(2), 6.1(2)su1 (+45)

References

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20110928-cucm
http://tools.cisco.com/security/center/viewAlert.x?alertId=24525
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20110928-cucm
http://tools.cisco.com/security/center/viewAlert.x?alertId=24525

Get alerted when CVE-2011-0941 or the next vulnerability affects your stack