Unscored CVE-2008-1151 EUVD-2008-1160GHSA-5247-6v69-x2p9

Memory leak in the virtual private dial-up network (VPDN) component in Cisco IOS before 12.3 allows remote attackers to cause a denial of s…

Published Mar 27, 2008 · Updated Aug 7, 2024 · Assigned by cisco

Description

Memory leak in the virtual private dial-up network (VPDN) component in Cisco IOS before 12.3 allows remote attackers to cause a denial of service (memory consumption) via a series of PPTP sessions, related to "dead memory" that remains allocated after process termination, aka bug ID CSCsj58566.

References

ADV-2008-1006 vdb-entry
cisco-ios-vpdn-pptp-dos(41483) vdb-entry
28460 vdb-entry
20080326 Cisco IOS Virtual Private Dial-up Network Denial of Service Vulnerability vendor-advisory
TA08-087B third-party-advisory
29507 third-party-advisory
oval:org.mitre.oval:def:5287 vdb-entry signature
1019714 vdb-entry