CVE-2007-1306

Asterisk 1.4 before 1.4.1 and 1.2 before 1.2.16 allows remote attackers to cause a denial of service (crash) by sending a Session Initiation Protocol (SIP) packet without a URI and SIP-version header, which results in a NULL pointer dereference.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:digium:asterisk:1.2.0_beta1:*:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:1.2.0_beta2:*:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:1.2.6:*:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:1.2.7:*:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:1.2.8:*:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:1.2.9:*:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:1.2.10:*:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:1.2.11:*:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:1.2.12:*:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:1.2.12.1:*:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:1.2.13:*:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:1.2.14:*:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:1.2.15:*:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:1.2_beta1:*:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:1.2_beta2:*:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:1.4.0:*:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:1.4.0_beta1:*:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:1.4.0_beta2:*:*:*:*:*:*:*

History

21 Nov 2024, 00:28

Type Values Removed Values Added
References () http://asterisk.org/node/48319 - () http://asterisk.org/node/48319 -
References () http://asterisk.org/node/48320 - () http://asterisk.org/node/48320 -
References () http://labs.musecurity.com/advisories/MU-200703-01.txt - () http://labs.musecurity.com/advisories/MU-200703-01.txt -
References () http://secunia.com/advisories/24380 - () http://secunia.com/advisories/24380 -
References () http://secunia.com/advisories/24578 - Vendor Advisory () http://secunia.com/advisories/24578 - Vendor Advisory
References () http://secunia.com/advisories/25582 - Vendor Advisory () http://secunia.com/advisories/25582 - Vendor Advisory
References () http://security.gentoo.org/glsa/glsa-200703-14.xml - () http://security.gentoo.org/glsa/glsa-200703-14.xml -
References () http://www.debian.org/security/2007/dsa-1358 - () http://www.debian.org/security/2007/dsa-1358 -
References () http://www.kb.cert.org/vuls/id/228032 - US Government Resource () http://www.kb.cert.org/vuls/id/228032 - US Government Resource
References () http://www.novell.com/linux/security/advisories/2007_34_asterisk.html - () http://www.novell.com/linux/security/advisories/2007_34_asterisk.html -
References () http://www.osvdb.org/33888 - () http://www.osvdb.org/33888 -
References () http://www.securityfocus.com/bid/22838 - () http://www.securityfocus.com/bid/22838 -
References () http://www.securitytracker.com/id?1017723 - () http://www.securitytracker.com/id?1017723 -
References () http://www.vupen.com/english/advisories/2007/0830 - Vendor Advisory () http://www.vupen.com/english/advisories/2007/0830 - Vendor Advisory
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/32830 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/32830 -

Information

Published : 2007-03-07 00:19

Updated : 2024-11-21 00:28


NVD link : CVE-2007-1306

Mitre link : CVE-2007-1306

CVE.ORG link : CVE-2007-1306


JSON object : View

Products Affected

digium

  • asterisk