← Database

CVE-2009-0635

HIGH CVSS: 7.1 Published: 2009-03-27 Modified: 2026-06-16

Description

Memory leak in the Cisco Tunneling Control Protocol (cTCP) encapsulation feature in Cisco IOS 12.4, when an Easy VPN (aka EZVPN) server is enabled, allows remote attackers to cause a denial of service (memory consumption and device crash) via a sequence of TCP packets.

Affected Platforms

Cisco Ios

Weakness Type

CWE-399

References