CVE-2007-3764

Published: Jul 18, 2007Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The Skinny channel driver (chan_skinny) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote attackers to cause a denial of service (crash) via a certain data length value in a crafted packet, which results in an "overly large memcpy."

Affected (36)

Products: Asterisk: Asterisk, Asterisk Appliance Developer Kit, Asterisknow, S800i Appliance

Asterisk

4 products

Asterisk

Asterisk Appliance Developer Kit

Asterisknow

S800i Appliance

Configuration A

34 vulnerable

Vulnerable Software	Affected Versions
Asterisk Asterisk	Version 1.0.10
Asterisk Asterisk	Version 1.0.11
Asterisk Asterisk	Version 1.0.12
Asterisk Asterisk	Version 1.0.6
Asterisk Asterisk	Version 1.0.7
Asterisk Asterisk	Version 1.0.8
Asterisk Asterisk	Version 1.0.9
Asterisk Asterisk	Version 1.0
Asterisk Asterisk	Version 1.2.0_beta1
Asterisk Asterisk	Version 1.2.0_beta2
Asterisk Asterisk	Version 1.2.10
Asterisk Asterisk	Version 1.2.11
Asterisk Asterisk	Version 1.2.12
Asterisk Asterisk	Version 1.2.13
Asterisk Asterisk	Version 1.2.14
Asterisk Asterisk	Version 1.2.15
Asterisk Asterisk	Version 1.2.16
Asterisk Asterisk	Version 1.2.17
Asterisk Asterisk	Version 1.2.5
Asterisk Asterisk	Version 1.2.6
Asterisk Asterisk	Version 1.2.7
Asterisk Asterisk	Version 1.2.8
Asterisk Asterisk	Version 1.2.9
Asterisk Asterisk	Version 1.4.1
Asterisk Asterisk	Version 1.4.2
Asterisk Asterisk	Version 1.4.4_2007-04-27
Asterisk Asterisk	Version 1.4_beta
Asterisk Asterisk	Version a
Asterisk Asterisk	Version b.1.3.2
Asterisk Asterisk	Version b.1.3.3
Asterisk Asterisk	Version b.2.2.0
Asterisk Asterisk Appliance Developer Kit	Up to 0.4
Asterisk Asterisknow	Version beta_5
Asterisk Asterisknow	Version beta_6