CVE-2011-4019: Cisco IOS

Medium severity, CVSS 5.4. EPSS: 1.1% chance of exploitation in the next 30 days.

Memory leak in Cisco IOS 12.4 and 15.0 through 15.2, and Cisco Unified Communications Manager (CUCM) 7.x, allows remote attackers to cause a denial of service (memory consumption) via a crafted response to a SIP SUBSCRIBE message, aka Bug IDs CSCto93837 and CSCtj61883.

Affected products

• Cisco IOS: version 12.4 only; version 15.0 only; version 15.1 only; version 15.2 only
• Cisco Unified Communications Manager: version 7.0 only; version 7.0(1) only; version 7.0(1)su1 only; version 7.0(1)su1a only; version 7.0(2) only; version 7.0(2a) only; …

Published 2012-05-03. Last modified 2026-06-16.