VULNERABILITY INTELLIGENCE

CVE-2009-5039

CVSS score5 NONE

EPSS probability1.30%

CISA KEVNot currently listed

Published2011-01-07

Last modified2026-06-16

CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:P

Description

Memory leak in the gk_circuit_info_do_in_acf function in the H.323 implementation in Cisco IOS before 15.0(1)XA allows remote attackers to cause a denial of service (memory consumption) via a large number of calls over a long duration, as demonstrated by InterZone Clear Token (IZCT) test traffic, aka Bug ID CSCsz72535.

Weakness classification

nvd@nist.gov: CWE-772

Primary references

cve@mitre.org — Release Notes, Vendor Advisory
cve@mitre.org — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Release Notes, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry