CVE-2010-4686

Name of the Vulnerable Software and Affected Versions Cisco IOS versions prior to 15.0(1)XA1

Description The issue is related to the handling of SIP TRUNK traffic with rate bursts and a peculiar request size in CallManager Express (CME) on Cisco IOS. This allows remote attackers to cause a denial of service by consuming memory over a long duration.

Recommendations For versions prior to 15.0(1)XA1, update to version 15.0(1)XA1 or later to resolve the issue.