Lucene search

[email protected]CVE-2007-3763

HistoryJul 18, 2007 - 5:30 p.m.

CVE-2007-3763

2007-07-1817:30:00

[email protected]

web.nvd.nist.gov

cve-2007-3763

asterisk

iax2

denial of service

remote attack

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.2 High

AI Score

Confidence

High

0.954 High

EPSS

Percentile

99.4%

JSON

The IAX2 channel driver (chan_iax2) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote attackers to cause a denial of service (crash) via a crafted (1) LAGRQ or (2) LAGRP frame that contains information elements of IAX frames, which results in a NULL pointer dereference when Asterisk does not properly set an associated variable.

Affected configurations

NVD

Node

asteriskasteriskMatch1.0

asteriskasteriskMatch1.0.6

asteriskasteriskMatch1.0.7

asteriskasteriskMatch1.0.8

asteriskasteriskMatch1.0.9

asteriskasteriskMatch1.0.10

asteriskasteriskMatch1.0.11

asteriskasteriskMatch1.0.12

asteriskasteriskMatch1.2.0_beta1

asteriskasteriskMatch1.2.0_beta2

asteriskasteriskMatch1.2.5

asteriskasteriskMatch1.2.6

asteriskasteriskMatch1.2.7

asteriskasteriskMatch1.2.8

asteriskasteriskMatch1.2.9

asteriskasteriskMatch1.2.10

asteriskasteriskMatch1.2.11

asteriskasteriskMatch1.2.12

asteriskasteriskMatch1.2.13

asteriskasteriskMatch1.2.14

asteriskasteriskMatch1.2.15

asteriskasteriskMatch1.2.16

asteriskasteriskMatch1.2.17

asteriskasteriskMatch1.4.1

asteriskasteriskMatch1.4.2

asteriskasteriskMatch1.4.4_2007-04-27

asteriskasteriskMatch1.4_beta

asteriskasteriskMatchabusiness

asteriskasteriskMatchb.1.3.2business

asteriskasteriskMatchb.1.3.3business

asteriskasteriskMatchb.2.2.0business

asteriskasterisk_appliance_developer_kitRange≤0.4

asteriskasterisknowMatchbeta_5

asteriskasterisknowMatchbeta_6

Node

asterisks800i_applianceMatch1.0

asterisks800i_applianceMatch1.0.1

CPENameOperatorVersion
asterisk:asteriskasteriskeq1.0
asterisk:asteriskasteriskeq1.0.6
asterisk:asteriskasteriskeq1.0.7
asterisk:asteriskasteriskeq1.0.8
asterisk:asteriskasteriskeq1.0.9
asterisk:asteriskasteriskeq1.0.10
asterisk:asteriskasteriskeq1.0.11
asterisk:asteriskasteriskeq1.0.12
asterisk:asteriskasteriskeq1.2.0_beta1
asterisk:asteriskasteriskeq1.2.0_beta2

CPE	Name	Operator	Version
asterisk:asterisk	asterisk	eq	1.0
asterisk:asterisk	asterisk	eq	1.0.6
asterisk:asterisk	asterisk	eq	1.0.7
asterisk:asterisk	asterisk	eq	1.0.8
asterisk:asterisk	asterisk	eq	1.0.9
asterisk:asterisk	asterisk	eq	1.0.10
asterisk:asterisk	asterisk	eq	1.0.11
asterisk:asterisk	asterisk	eq	1.0.12
asterisk:asterisk	asterisk	eq	1.2.0_beta1
asterisk:asterisk	asterisk	eq	1.2.0_beta2