Lucene search

K
freebsdFreeBSDA95092A6-F8F1-11E0-A7EA-00215C6A37BB
HistoryOct 17, 2011 - 12:00 a.m.

asterisk -- remote crash vulnerability in SIP channel driver

2011-10-1700:00:00
vuxml.freebsd.org
18

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

EPSS

0.964

Percentile

99.6%

Asterisk project reports:

A remote authenticated user can cause a crash with a malformed
request due to an unitialized variable.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchasterisk18< 1.8.7.1UNKNOWN
FreeBSDanynoarchasterisk< 10.0.0.r1UNKNOWN

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

EPSS

0.964

Percentile

99.6%