CVE-2006-5444

2006-10-2317:07:00

Debian Security Bug Tracker

security-tracker.debian.org

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.968 High

EPSS

Percentile

99.7%

JSON

Integer overflow in the get_input function in the Skinny channel driver (chan_skinny.c) in Asterisk 1.0.x before 1.0.12 and 1.2.x before 1.2.13, as used by Cisco SCCP phones, allows remote attackers to execute arbitrary code via a certain dlen value that passes a signed integer comparison and leads to a heap-based buffer overflow.

OSVersionArchitecturePackageVersionFilename
Debian11allasterisk< 1:1.2.13~dfsg-1asterisk_1:1.2.13~dfsg-1_all.deb
Debian999allasterisk< 1:1.2.13~dfsg-1asterisk_1:1.2.13~dfsg-1_all.deb