CVE-2009-0628

Memory leak in the SSLVPN feature in Cisco IOS 12.3 through 12.4 allows remote attackers to cause a denial of service (memory consumption and device crash) by disconnecting an SSL session in an abnormal manner, leading to a Transmission Control Block (TCB) leak.

• CWE-200

• http://secunia.com/advisories/34438Vendor Advisory
• http://securitytracker.com/id?1021896
• http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90424.shtmlVendor Advisory
• http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtmlVendor Advisory
• http://www.securityfocus.com/bid/34239
• http://www.vupen.com/english/advisories/2009/0851Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49427
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12092
• http://secunia.com/advisories/34438Vendor Advisory
• http://securitytracker.com/id?1021896
• http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90424.shtmlVendor Advisory
• http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtmlVendor Advisory
• http://www.securityfocus.com/bid/34239
• http://www.vupen.com/english/advisories/2009/0851Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49427
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12092

Published

Mar 27, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-0622Unspecified vulnerability in Cisco ACE Application Control E…
• CVE-2009-0623Unspecified vulnerability in Cisco ACE Application Control E…
• CVE-2009-0624Unspecified vulnerability in the SNMPv2c implementation in C…
• CVE-2009-0625Unspecified vulnerability in Cisco ACE Application Control E…
• CVE-2009-0626The SSLVPN feature in Cisco IOS 12.3 through 12.4 allows rem…
• CVE-2009-0627Unspecified vulnerability in Cisco NX-OS before 4.0(1a)N2(1)…
• CVE-2009-0629The (1) Airline Product Set (aka ALPS), (2) Serial Tunnel Co…
• CVE-2009-0630The (1) Cisco Unified Communications Manager Express; (2) SI…
• CVE-2009-0631Unspecified vulnerability in Cisco IOS 12.0 through 12.4, wh…
• CVE-2009-0632The IP Phone Personal Address Book (PAB) Synchronizer featur…
• CVE-2009-0633Multiple unspecified vulnerabilities in the (1) Mobile IP NA…
• CVE-2009-0634Multiple unspecified vulnerabilities in the home agent (HA) …