CVE-2009-0628

Memory leak in the SSLVPN feature in Cisco IOS 12.3 through 12.4 allows remote attackers to cause a denial of service (memory consumption and device crash) by disconnecting an SSL session in an abnormal manner, leading to a Transmission Control Block (TCB) leak.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:C
ciscoCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 79%
VendorProductVersion
ciscocisco_ios
12.3
ciscocisco_ios
12.3:b
ciscocisco_ios
12.3:bc
ciscocisco_ios
12.3:bw
ciscocisco_ios
12.3:eu
ciscocisco_ios
12.3:ja
ciscocisco_ios
12.3:jea
ciscocisco_ios
12.3:jeb
ciscocisco_ios
12.3:jec
ciscocisco_ios
12.3:jk
ciscocisco_ios
12.3:jl
ciscocisco_ios
12.3:jx
ciscocisco_ios
12.3:t
ciscocisco_ios
12.3:tpc
ciscocisco_ios
12.3:va
ciscocisco_ios
12.3:xa
ciscocisco_ios
12.3:xb
ciscocisco_ios
12.3:xc
ciscocisco_ios
12.3:xd
ciscocisco_ios
12.3:xe
ciscocisco_ios
12.3:xf
ciscocisco_ios
12.3:xg
ciscocisco_ios
12.3:xh
ciscocisco_ios
12.3:xi
ciscocisco_ios
12.3:xj
ciscocisco_ios
12.3:xk
ciscocisco_ios
12.3:xq
ciscocisco_ios
12.3:xr
ciscocisco_ios
12.3:xs
ciscocisco_ios
12.3:xu
ciscocisco_ios
12.3:xw
ciscocisco_ios
12.3:xy
ciscocisco_ios
12.3:ya
ciscocisco_ios
12.3:yd
ciscocisco_ios
12.3:yf
ciscocisco_ios
12.3:yg
ciscocisco_ios
12.3:yh
ciscocisco_ios
12.3:yi
ciscocisco_ios
12.3:yj
ciscocisco_ios
12.3:yk
ciscocisco_ios
12.3:ym
ciscocisco_ios
12.3:yq
ciscocisco_ios
12.3:ys
ciscocisco_ios
12.3:yt
ciscocisco_ios
12.3:yu
ciscocisco_ios
12.3:yx
ciscocisco_ios
12.3:yz
ciscocisco_ios
12.4
ciscocisco_ios
12.4:ja
ciscocisco_ios
12.4:jk
ciscocisco_ios
12.4:jma
ciscocisco_ios
12.4:jmb
ciscocisco_ios
12.4:jmc
ciscocisco_ios
12.4:jx
ciscocisco_ios
12.4:md
ciscocisco_ios
12.4:mr
ciscocisco_ios
12.4:sw
ciscocisco_ios
12.4:t
ciscocisco_ios
12.4:xa
ciscocisco_ios
12.4:xb
ciscocisco_ios
12.4:xc
ciscocisco_ios
12.4:xd
ciscocisco_ios
12.4:xe
ciscocisco_ios
12.4:xf
ciscocisco_ios
12.4:xg
ciscocisco_ios
12.4:xj
ciscocisco_ios
12.4:xk
𝑥
= Vulnerable software versions