CVE-2009-0631: Cisco IOS

High severity, CVSS 7.8. EPSS: 1.9% chance of exploitation in the next 30 days.

Unspecified vulnerability in Cisco IOS 12.0 through 12.4, when configured with (1) IP Service Level Agreements (SLAs) Responder, (2) Session Initiation Protocol (SIP), (3) H.323 Annex E Call Signaling Transport, or (4) Media Gateway Control Protocol (MGCP) allows remote attackers to cause a denial of service (blocked input queue on the inbound interface) via a crafted UDP packet.

Affected products

• Cisco IOS: version 12.0 only; version 12.0da only; version 12.0db only; version 12.0dc only; version 12.0s only; version 12.0sc only; …

Published 2009-03-27. Last modified 2026-06-16.