CVE:CVE-2011-4019
CNNVD:CNNVD-201205-066
Cisco IOS是美国思科（Cisco）公司为其网络设备开发的操作系统。
Cisco IOS 12.4版本、15.0至15.2版本与Cisco Unified Communications Manager (CUCM) 7.x版本中存在内存泄露漏洞。远程攻击者可利用该漏洞借助至SIP SUBSCRIBE消息的特制响应导致拒绝服务（内存消耗），也称Bug IDs CSCto93837与 CSCtj61883。
solution:Upgrade cisco ios to a higher version than 12.4,15.0,15.1,15.2,and avoid the version 12.4,15.0,15.1,15.2; Upgrade cisco unified_communications_manager to a higher version than 7.0,7.0(1,7.0(1su1,7.0(1su1a,7.0(2,7.0(2a,7.0(2asu1,7.0(2asu2,7.0_base,7.1,7.1(2a,7.1(2asu1,7.1(2b,7.1(2bsu1,7.1(3,7.1(3a,7.1(3asu1,7.1(3asu1a,7.1(3b,7.1(3bsu1,7.1(3bsu2,7.1(5,7.1(5su1,7.1(5su1a,7.1(5a,7.1(5b,7.1(5bsu1,7.1(5bsu1a,7.1(5bsu2,7.1(5bsu3,7.1(5bsu4,7.1(5bsu5,7.1_base,and avoid the version 7.0,7.0(1),7.0(1)su1,7.0(1)su1a,7.0(2),7.0(2a),7.0(2a)su1,7.0(2a)su2,7.0_base,7.1,7.1(2a),7.1(2a)su1,7.1(2b),7.1(2b)su1,7.1(3),7.1(3a),7.1(3a)su1,7.1(3a)su1a,7.1(3b),7.1(3b)su1,7.1(3b)su2,7.1(5),7.1(5)su1,7.1(5)su1a,7.1(5a),7.1(5b),7.1(5b)su1,7.1(5b)su1a,7.1(5b)su2,7.1(5b)su3,7.1(5b)su4,7.1(5b)su5,7.1_base