CVE-2008-1743

high

Description

Memory leak in the Certificate Trust List (CTL) Provider service in Cisco Unified Communications Manager (CUCM) 5.x before 5.1(3) and 6.x before 6.1(1) allows remote attackers to cause a denial of service (memory consumption and service interruption) via a series of malformed TCP packets, aka Bug ID CSCsi98433.

References

Advisories
More

https://exchange.xforce.ibmcloud.com/vulnerabilities/42414

http://www.vupen.com/english/advisories/2008/1533

http://www.securityfocus.com/bid/29221

http://securitytracker.com/id?1020022

http://secunia.com/advisories/30238

http://www.cisco.com/en/US/products/products_security_advisory09186a0080995688.shtml

Details

Source: Mitre, NVD

Published: 2008-05-16

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 7.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C

Severity: High

CVSS v3

Base Score: 7.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Severity: High

EPSS

EPSS: 0.01626