Cisco IOS 'gk_circuit_info_do_in_acf()' Function H.323 Denial of Service Vulnerability

Bugtraq ID:	45758
Class:	Unknown
CVE:	CVE-2009-5039
Remote:	Yes
Local:	No
Published:	Oct 27 2009 12:00AM
Updated:	Oct 27 2009 12:00AM
Credit:	Cisco
Vulnerable:	Cisco IOS 15.0XO Cisco IOS 15.0XA Cisco IOS 15.0S Cisco IOS 15.0M Cisco IOS 15.0M Cisco IOS 15.0(1)XA Cisco IOS 15.0(1)M3 Cisco IOS 15.0(1)M3 Cisco IOS 15.0(1)M2 Cisco IOS 15.0(1)M1 Cisco IOS 15.0(1)M1 Cisco IOS 15.0 M Cisco IOS 15.0 (1)M3
Not Vulnerable:

Cisco IOS 'gk_circuit_info_do_in_acf()' Function H.323 Denial of Service Vulnerability

Cisco IOS is prone to a remote denial-of-service vulnerability.

An attacker can exploit this issue to cause the affected device to consume an excessive amount of memory, denying service to legitimate users.

This issue is being tracked by Cisco Bug ID CSCsz72535.

Cisco IOS 'gk_circuit_info_do_in_acf()' Function H.323 Denial of Service Vulnerability

To exploit this issue, attackers can use readily available network utilities.

Cisco IOS 'gk_circuit_info_do_in_acf()' Function H.323 Denial of Service Vulnerability

Solution:
The vendor has released updates. Please see the referenced advisory for more information.

Cisco IOS 'gk_circuit_info_do_in_acf()' Function H.323 Denial of Service Vulnerability

References:

• Cisco Homepage (Cisco )
  
• Release Notes for Cisco 800 Series Routers with Cisco IOS Release 15.0(1)XA (Cisco)