Lucene search
HistoryApr 01, 2013 - 4:55 p.m.
CVE-2013-2685
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.8
Confidence
Low
EPSS
0.456
Percentile
97.4%
Stack-based buffer overflow in res/res_format_attr_h264.c in Asterisk Open Source 11.x before 11.2.2 allows remote attackers to execute arbitrary code via a long sprop-parameter-sets H.264 media attribute in a SIP Session Description Protocol (SDP) header.
Affected configurations
Node
asteriskopen_sourceMatch11.0.0
ORasteriskopen_sourceMatch11.0.0beta1
ORasteriskopen_sourceMatch11.0.0beta2
ORasteriskopen_sourceMatch11.0.0rc1
ORasteriskopen_sourceMatch11.0.0rc2
ORasteriskopen_sourceMatch11.0.1
ORasteriskopen_sourceMatch11.0.2
ORasteriskopen_sourceMatch11.1.0
ORasteriskopen_sourceMatch11.1.0rc1
ORasteriskopen_sourceMatch11.1.0rc3
ORasteriskopen_sourceMatch11.1.1
ORasteriskopen_sourceMatch11.1.2
ORasteriskopen_sourceMatch11.2.0
ORasteriskopen_sourceMatch11.2.0rc1
ORasteriskopen_sourceMatch11.2.0rc2
ORasteriskopen_sourceMatch11.2.1
Related
checkpoint_advisories
checkpoint_advisories
Digium Asterisk SIP SDP Header Parsing Stack Buffer Overflow (CVE-2013-2685)
2013-06-30 00:00:00
openvas
openvas
Fedora Update for asterisk FEDORA-2013-4566
2013-04-08 00:00:00
Fedora Update for asterisk FEDORA-2013-4566
2013-04-08 00:00:00
Gentoo Security Advisory GLSA 201401-15
2015-09-29 00:00:00
fedora
fedora
[SECURITY] Fedora 18 Update: asterisk-11.2.2-1.fc18
2013-04-07 00:28:33
cve
cve
CVE-2013-2685
2022-10-03 16:15:01
cvelist
cvelist
CVE-2013-2685
2022-10-03 16:15:01
nessus
nessus
Asterisk SIP SDP Buffer Overflow (AST-2013-001)
2013-04-10 00:00:00
Fedora 18 : asterisk-11.2.2-1.fc18 (2013-4566)
2013-04-08 00:00:00
ubuntucve
ubuntucve
CVE-2013-2685
2013-04-01 00:00:00
debiancve
debiancve
CVE-2013-2685
2022-10-03 16:15:01
prion
prion
Stack overflow
2013-04-01 16:55:00
securityvulns
securityvulns
AST-2013-001: Buffer Overflow Exploit Through SIP SDP Header
2013-04-01 00:00:00
Asterisk multiple security vulnerabilities
2013-04-01 00:00:00
freebsd
freebsd
asterisk -- multiple vulnerabilities
2013-03-27 00:00:00
gentoo
gentoo
Asterisk: Multiple vulnerabilities
2014-01-21 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.8
Confidence
Low
EPSS
0.456
Percentile
97.4%
Related for NVD:CVE-2013-2685