CVE-2007-1594

The handle_response function in chan_sip.c in Asterisk before 1.2.17 and 1.4.x before 1.4.2 allows remote attackers to cause a denial of service (crash) via a SIP Response code 0 in a SIP packet.
References
Link Resource
http://bugs.digium.com/view.php?id=9313 Vendor Advisory
http://secunia.com/advisories/24579 Patch Vendor Advisory
http://secunia.com/advisories/24719
http://secunia.com/advisories/25582
http://security.gentoo.org/glsa/glsa-200704-01.xml
http://svn.digium.com/view/asterisk/trunk/channels/chan_sip.c?r1=58907&r2=59038
http://voipsa.org/pipermail/voipsec_voipsa.org/2007-March/002275.html Vendor Advisory
http://www.asterisk.org/node/48338
http://www.novell.com/linux/security/advisories/2007_34_asterisk.html
http://www.securityfocus.com/archive/1/463434/100/0/threaded
http://www.securityfocus.com/bid/23093
http://www.securitytracker.com/id?1017809
http://www.sineapps.com/news.php?rssid=1707 Vendor Advisory
http://www.vupen.com/english/advisories/2007/1077
http://bugs.digium.com/view.php?id=9313 Vendor Advisory
http://secunia.com/advisories/24579 Patch Vendor Advisory
http://secunia.com/advisories/24719
http://secunia.com/advisories/25582
http://security.gentoo.org/glsa/glsa-200704-01.xml
http://svn.digium.com/view/asterisk/trunk/channels/chan_sip.c?r1=58907&r2=59038
http://voipsa.org/pipermail/voipsec_voipsa.org/2007-March/002275.html Vendor Advisory
http://www.asterisk.org/node/48338
http://www.novell.com/linux/security/advisories/2007_34_asterisk.html
http://www.securityfocus.com/archive/1/463434/100/0/threaded
http://www.securityfocus.com/bid/23093
http://www.securitytracker.com/id?1017809
http://www.sineapps.com/news.php?rssid=1707 Vendor Advisory
http://www.vupen.com/english/advisories/2007/1077
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:asterisk:asterisk:0.1.7:*:*:*:*:*:*:*
cpe:2.3:a:asterisk:asterisk:0.1.8:*:*:*:*:*:*:*
cpe:2.3:a:asterisk:asterisk:0.1.9:*:*:*:*:*:*:*
cpe:2.3:a:asterisk:asterisk:0.1.9_1:*:*:*:*:*:*:*
cpe:2.3:a:asterisk:asterisk:0.1.11:*:*:*:*:*:*:*
cpe:2.3:a:asterisk:asterisk:0.2:*:*:*:*:*:*:*
cpe:2.3:a:asterisk:asterisk:0.3:*:*:*:*:*:*:*
cpe:2.3:a:asterisk:asterisk:0.4:*:*:*:*:*:*:*
cpe:2.3:a:asterisk:asterisk:0.7.0:*:*:*:*:*:*:*
cpe:2.3:a:asterisk:asterisk:0.7.1:*:*:*:*:*:*:*
cpe:2.3:a:asterisk:asterisk:0.7.2:*:*:*:*:*:*:*
cpe:2.3:a:asterisk:asterisk:0.9.0:*:*:*:*:*:*:*
cpe:2.3:a:asterisk:asterisk:1.0:*:*:*:*:*:*:*
cpe:2.3:a:asterisk:asterisk:1.0.6:*:*:*:*:*:*:*
cpe:2.3:a:asterisk:asterisk:1.0.7:*:*:*:*:*:*:*
cpe:2.3:a:asterisk:asterisk:1.0.8:*:*:*:*:*:*:*
cpe:2.3:a:asterisk:asterisk:1.0.9:*:*:*:*:*:*:*
cpe:2.3:a:asterisk:asterisk:1.0.10:*:*:*:*:*:*:*
cpe:2.3:a:asterisk:asterisk:1.0.11:*:*:*:*:*:*:*
cpe:2.3:a:asterisk:asterisk:1.0.12:*:*:*:*:*:*:*
cpe:2.3:a:asterisk:asterisk:1.2.0_beta1:*:*:*:*:*:*:*
cpe:2.3:a:asterisk:asterisk:1.2.0_beta2:*:*:*:*:*:*:*
cpe:2.3:a:asterisk:asterisk:1.2.5:*:*:*:*:*:*:*
cpe:2.3:a:asterisk:asterisk:1.2.6:*:*:*:*:*:*:*
cpe:2.3:a:asterisk:asterisk:1.2.7:*:*:*:*:*:*:*
cpe:2.3:a:asterisk:asterisk:1.2.8:*:*:*:*:*:*:*
cpe:2.3:a:asterisk:asterisk:1.2.9:*:*:*:*:*:*:*
cpe:2.3:a:asterisk:asterisk:1.2.10:*:*:*:*:*:*:*
cpe:2.3:a:asterisk:asterisk:1.2.11:*:*:*:*:*:*:*
cpe:2.3:a:asterisk:asterisk:1.2.12:*:*:*:*:*:*:*
cpe:2.3:a:asterisk:asterisk:1.2.13:*:*:*:*:*:*:*
cpe:2.3:a:asterisk:asterisk:1.2.14:*:*:*:*:*:*:*
cpe:2.3:a:asterisk:asterisk:1.2.15:*:*:*:*:*:*:*
cpe:2.3:a:asterisk:asterisk:1.2.16:*:*:*:*:*:*:*
cpe:2.3:a:asterisk:asterisk:1.2.17:*:*:*:*:*:*:*
cpe:2.3:a:asterisk:asterisk:1.4.1:*:*:*:*:*:*:*
cpe:2.3:a:asterisk:asterisk:1.4_beta:*:*:*:*:*:*:*

History

21 Nov 2024, 00:28

Type Values Removed Values Added
References () http://bugs.digium.com/view.php?id=9313 - Vendor Advisory () http://bugs.digium.com/view.php?id=9313 - Vendor Advisory
References () http://secunia.com/advisories/24579 - Patch, Vendor Advisory () http://secunia.com/advisories/24579 - Patch, Vendor Advisory
References () http://secunia.com/advisories/24719 - () http://secunia.com/advisories/24719 -
References () http://secunia.com/advisories/25582 - () http://secunia.com/advisories/25582 -
References () http://security.gentoo.org/glsa/glsa-200704-01.xml - () http://security.gentoo.org/glsa/glsa-200704-01.xml -
References () http://svn.digium.com/view/asterisk/trunk/channels/chan_sip.c?r1=58907&r2=59038 - () http://svn.digium.com/view/asterisk/trunk/channels/chan_sip.c?r1=58907&r2=59038 -
References () http://voipsa.org/pipermail/voipsec_voipsa.org/2007-March/002275.html - Vendor Advisory () http://voipsa.org/pipermail/voipsec_voipsa.org/2007-March/002275.html - Vendor Advisory
References () http://www.asterisk.org/node/48338 - () http://www.asterisk.org/node/48338 -
References () http://www.novell.com/linux/security/advisories/2007_34_asterisk.html - () http://www.novell.com/linux/security/advisories/2007_34_asterisk.html -
References () http://www.securityfocus.com/archive/1/463434/100/0/threaded - () http://www.securityfocus.com/archive/1/463434/100/0/threaded -
References () http://www.securityfocus.com/bid/23093 - () http://www.securityfocus.com/bid/23093 -
References () http://www.securitytracker.com/id?1017809 - () http://www.securitytracker.com/id?1017809 -
References () http://www.sineapps.com/news.php?rssid=1707 - Vendor Advisory () http://www.sineapps.com/news.php?rssid=1707 - Vendor Advisory
References () http://www.vupen.com/english/advisories/2007/1077 - () http://www.vupen.com/english/advisories/2007/1077 -

Information

Published : 2007-03-22 23:19

Updated : 2024-11-21 00:28


NVD link : CVE-2007-1594

Mitre link : CVE-2007-1594

CVE.ORG link : CVE-2007-1594


JSON object : View

Products Affected

asterisk

  • asterisk