CVE-2009-5039

Published: Jan 7, 2011Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Memory leak in the gk_circuit_info_do_in_acf function in the H.323 implementation in Cisco IOS before 15.0(1)XA allows remote attackers to cause a denial of service (memory consumption) via a large number of calls over a long duration, as demonstrated by InterZone Clear Token (IZCT) test traffic, aka Bug ID CSCsz72535.

Affected (1)

Products: Cisco: Ios

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Cisco Ios	Before 15.0\(1\)xa

Related CWEs

Missing Release of Resource after Effective Lifetime

The product does not release a resource after its effective lifetime has ended, i.e., after the resource is no longer needed.

References (4)

http://www.cisco.com/en/US/docs/ios/15_0/15_0x/15_01_XA/rn800xa.pdf

Source: cve@mitre.org

Release NotesVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/64731

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.cisco.com/en/US/docs/ios/15_0/15_0x/15_01_XA/rn800xa.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/64731

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

Timeline

No history available yet.