CVE-2007-3765

Published: Jul 18, 2007Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The STUN implementation in Asterisk 1.4.x before 1.4.8, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote attackers to cause a denial of service (crash) via a crafted STUN length attribute in a STUN packet sent on an RTP port.

Affected (36)

Products: Asterisk: Asterisk, Asterisk Appliance Developer Kit, Asterisknow, S800i Appliance

Asterisk

4 products

Asterisk

Asterisk Appliance Developer Kit

Asterisknow

S800i Appliance

Configuration A

34 vulnerable

Vulnerable Software	Affected Versions
Asterisk Asterisk	Version 1.0.10
Asterisk Asterisk	Version 1.0.11
Asterisk Asterisk	Version 1.0.12
Asterisk Asterisk	Version 1.0.6
Asterisk Asterisk	Version 1.0.7
Asterisk Asterisk	Version 1.0.8
Asterisk Asterisk	Version 1.0.9
Asterisk Asterisk	Version 1.0
Asterisk Asterisk	Version 1.2.0_beta1
Asterisk Asterisk	Version 1.2.0_beta2
Asterisk Asterisk	Version 1.2.10
Asterisk Asterisk	Version 1.2.11
Asterisk Asterisk	Version 1.2.12
Asterisk Asterisk	Version 1.2.13
Asterisk Asterisk	Version 1.2.14
Asterisk Asterisk	Version 1.2.15
Asterisk Asterisk	Version 1.2.16
Asterisk Asterisk	Version 1.2.17
Asterisk Asterisk	Version 1.2.5
Asterisk Asterisk	Version 1.2.6
Asterisk Asterisk	Version 1.2.7
Asterisk Asterisk	Version 1.2.8
Asterisk Asterisk	Version 1.2.9
Asterisk Asterisk	Version 1.4.1
Asterisk Asterisk	Version 1.4.2
Asterisk Asterisk	Version 1.4.4_2007-04-27
Asterisk Asterisk	Version 1.4_beta
Asterisk Asterisk	Version a
Asterisk Asterisk	Version b.1.3.2
Asterisk Asterisk	Version b.1.3.3
Asterisk Asterisk	Version b.2.2.0
Asterisk Asterisk Appliance Developer Kit	Up to 0.4
Asterisk Asterisknow	Version beta_5
Asterisk Asterisknow	Version beta_6