Published: 07/03/2007 Updated: 29/07/2017

CVSS v2 Base Score: 7.8 | Impact Score: 6.9 | Exploitability Score: 10

VMScore: 785

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C

Asterisk 1.4 prior to 1.4.1 and 1.2 prior to 1.2.16 allows remote malicious users to cause a denial of service (crash) by sending a Session Initiation Protocol (SIP) packet without a URI and SIP-version header, which results in a NULL pointer dereference.

Vulnerable Product	Search on Vulmon	Subscribe to Product
digium asterisk 1.2.12.1
digium asterisk 1.2.13
digium asterisk 1.2_beta1
digium asterisk 1.2_beta2
digium asterisk 1.2.11
digium asterisk 1.2.12
digium asterisk 1.2.8
digium asterisk 1.2.9
digium asterisk 1.2.0_beta1
digium asterisk 1.2.14
digium asterisk 1.2.15
digium asterisk 1.4.0
digium asterisk 1.4.0_beta1
digium asterisk 1.4.0_beta2
digium asterisk 1.2.0_beta2
digium asterisk 1.2.10
digium asterisk 1.2.6
digium asterisk 1.2.7

Debian Bug report logs - #419820 CVE-2007-1594: Asterisk segfaults upon receipt of a certain SIP packet (SIP Response code 0) Package: asterisk; Maintainer for asterisk is Debian VoIP Team <pkg-voip-maintainers@listsaliothdebianorg>; Source for asterisk is src:asterisk (PTS, buildd, popcon) Reported by: Frédéric Brière ...

Several remote vulnerabilities have been discovered in Asterisk, a free software PBX and telephony toolkit The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2007-1306 Mu Security discovered that a NULL pointer dereference in the SIP implementation could lead to denial of service CVE-2007-1561 Inr ...

/* this will cause asterisk to segfault, the bug that this exploits has been patched in release 1216 & 141 CLI> Program received signal SIGSEGV, Segmentation fault [Switching to Thread 1082719152 (LWP 2510)] register_verify (p=0x81cf600, sin=0x4088e750, req=0x4088e760, uri=0x0) at chan_sipc:8257 8257 while (*t &&a ...

NVD-CWE-Other http://asterisk.org/node/48319 http://asterisk.org/node/48320 http://www.kb.cert.org/vuls/id/228032 http://www.securitytracker.com/id?1017723 http://labs.musecurity.com/advisories/MU-200703-01.txt http://security.gentoo.org/glsa/glsa-200703-14.xml http://www.securityfocus.com/bid/22838 http://secunia.com/advisories/24380 http://secunia.com/advisories/24578 http://www.osvdb.org/33888 http://www.debian.org/security/2007/dsa-1358 http://www.novell.com/linux/security/advisories/2007_34_asterisk.html http://secunia.com/advisories/25582 http://www.vupen.com/english/advisories/2007/0830 https://exchange.xforce.ibmcloud.com/vulnerabilities/32830 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=419820 https://nvd.nist.gov https://www.exploit-db.com/exploits/3407/https://www.kb.cert.org/vuls/id/228032

CVE-2007-1306

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect