CVE-2011-4019: Memory leak in Cisco IOS 12.4 and 15.0 through 15.2, and Cisco Unified Communications Manager (CUCM) 7.x, a...

Security readout for executives and security teams

CVE-2011-4019 is a denial-of-service issue in older Cisco IOS and Cisco Unified Communications Manager versions. A remote attacker could trigger memory consumption through SIP-related traffic, potentially degrading or disrupting voice/network services. The supplied sources do not provide CVSS, confirmed active exploitation, or detailed fixed-version information. Exposure is most likely where affected Cisco IOS or CUCM 7.x systems process SIP signaling. Internet-facing or broadly reachable SIP services would carry higher operational risk, but the bundle does not identify specific deployment prerequisites beyond SIP SUBSCRIBE message handling. Treat this as an availability risk for legacy Cisco voice and network infrastructure. Priority depends on whether affected systems are still in production and reachable by SIP traffic. Lack of CVSS and exploit confirmation lowers certainty, not potential service impact. Mitigation focus: Inventory Cisco IOS 12.4 and 15.0 through 15.2 systems.; Inventory Cisco Unified Communications Manager 7.x deployments.; Review Cisco referenced release notes and CUCM readme for fixed releases..

Prepared

Jun 24, 2026, 12:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.