CVE-2007-1306

Published: Mar 7, 2007Modified: Apr 23, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

Asterisk 1.4 before 1.4.1 and 1.2 before 1.2.16 allows remote attackers to cause a denial of service (crash) by sending a Session Initiation Protocol (SIP) packet without a URI and SIP-version header, which results in a NULL pointer dereference.

Affected (18)

Products: Digium: Asterisk

1 product

Configuration A

18 vulnerable

Vulnerable Software	Affected Versions
Digium Asterisk	Version 1.2.0_beta1
Digium Asterisk	Version 1.2.0_beta2
Digium Asterisk	Version 1.2.10
Digium Asterisk	Version 1.2.11
Digium Asterisk	Version 1.2.12.1
Digium Asterisk	Version 1.2.12
Digium Asterisk	Version 1.2.13
Digium Asterisk	Version 1.2.14
Digium Asterisk	Version 1.2.15
Digium Asterisk	Version 1.2.6
Digium Asterisk	Version 1.2.7
Digium Asterisk	Version 1.2.8
Digium Asterisk	Version 1.2.9
Digium Asterisk	Version 1.2_beta1
Digium Asterisk	Version 1.2_beta2
Digium Asterisk	Version 1.4.0
Digium Asterisk	Version 1.4.0_beta1
Digium Asterisk	Version 1.4.0_beta2

References (30)

http://asterisk.org/node/48319

Source: cve@mitre.org

http://asterisk.org/node/48320

Source: cve@mitre.org

http://labs.musecurity.com/advisories/MU-200703-01.txt

Source: cve@mitre.org

http://secunia.com/advisories/24380

Source: cve@mitre.org

http://secunia.com/advisories/24578

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/25582

Source: cve@mitre.org

Vendor Advisory

http://security.gentoo.org/glsa/glsa-200703-14.xml

Source: cve@mitre.org

http://www.debian.org/security/2007/dsa-1358

Source: cve@mitre.org

http://www.kb.cert.org/vuls/id/228032

Source: cve@mitre.org

US Government Resource

http://www.novell.com/linux/security/advisories/2007_34_asterisk.html

Source: cve@mitre.org

http://www.osvdb.org/33888

Source: cve@mitre.org

http://www.securityfocus.com/bid/22838

Source: cve@mitre.org

http://www.securitytracker.com/id?1017723

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/0830

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/32830

Source: cve@mitre.org

http://asterisk.org/node/48319

Source: af854a3a-2127-422b-91ae-364da2661108

http://asterisk.org/node/48320

Source: af854a3a-2127-422b-91ae-364da2661108

http://labs.musecurity.com/advisories/MU-200703-01.txt

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/24380

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/24578

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/25582

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://security.gentoo.org/glsa/glsa-200703-14.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2007/dsa-1358

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.kb.cert.org/vuls/id/228032

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.novell.com/linux/security/advisories/2007_34_asterisk.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/33888

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/22838

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1017723

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2007/0830

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/32830

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.