CVE-2009-5039: Cisco IOS

Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days.

Memory leak in the gk_circuit_info_do_in_acf function in the H.323 implementation in Cisco IOS before 15.0(1)XA allows remote attackers to cause a denial of service (memory consumption) via a large number of calls over a long duration, as demonstrated by InterZone Clear Token (IZCT) test traffic, aka Bug ID CSCsz72535.

Affected products

• Cisco IOS: before 15.0\(1\)xa (fixed in 15.0\(1\)xa)

Published 2011-01-07. Last modified 2026-06-16.