CVE-2008-3799
Memory leak in the Session Initiation Protocol (SIP) implementation in Cisco IOS 12.2 through 12...
Memory leak in the Session Initiation Protocol (SIP) implementation in Cisco IOS 12.2 through 12.4, when VoIP is configured, allows remote attackers to cause a denial of service (memory consumption and voice-service outage) via unspecified valid SIP messages.
Exploit likelihood
What each source reports
NVD Score used
Memory leak in the Session Initiation Protocol (SIP) implementation in Cisco IOS 12.2 through 12.4, when VoIP is configured, allows remote attackers to cause a denial of service (memory consumption and voice-service outage) via unspecified valid SIP messages.
- Record
CVE-2008-3799- CVSS 2.0
- 7.8 High
AV:N/AC:L/Au:N/C:N/I:N/A:C - Weakness
- CWE-772
- Updated
- 2026-11-02
CVE List No score
Memory leak in the Session Initiation Protocol (SIP) implementation in Cisco IOS 12.2 through 12.4, when VoIP is configured, allows remote attackers to cause a denial of service (memory consumption and voice-service outage) via unspecified valid SIP messages.
- Record
CVE-2008-3799- Updated
- 2026-11-02
EUVDEUVD-2008-3785 No score
Memory leak in the Session Initiation Protocol (SIP) implementation in Cisco IOS 12.2 through 12.4, when VoIP is configured, allows remote attackers to cause a denial of service (memory consumption and voice-service outage) via unspecified valid SIP messages.
- Record
EUVD-2008-3785- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-c2cp-r782-35vp No score
Memory leak in the Session Initiation Protocol (SIP) implementation in Cisco IOS 12.2 through 12...
Memory leak in the Session Initiation Protocol (SIP) implementation in Cisco IOS 12.2 through 12.4, when VoIP is configured, allows remote attackers to cause a denial of service (memory consumption and voice-service outage) via unspecified valid SIP messages.
- Record
GHSA-c2cp-r782-35vp- Weakness
- CWE-772
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-3799 is a high vulnerability (CVSS 7.8) in Cisco Ios, published September 26, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.14%, the 87th percentile. No source names a fixed version.
References
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5927
secunia.com/advisories/31990
vupen.com/english/advisories/2008/2670
cisco.com/en/US/products/products_security_advisory09186a0080a01562.shtml
securitytracker.com/id?1020939
nvd.nist.gov/vuln/detail/CVE-2008-3799
github.com/advisories/GHSA-c2cp-r782-35vp