CVE-2007-1306

Asterisk 1.2-1.4 - Denial of Service via SIP Packet Without URI and SIP-Version Header

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2007-1306. PoCs published by fbffff.

AI-analyzed exploit summary This exploit targets a segmentation fault vulnerability in Asterisk's SIP channel driver by sending a malformed REGISTER request. The PoC demonstrates a DoS condition by crashing the Asterisk server.

Description

Asterisk 1.4 before 1.4.1 and 1.2 before 1.2.16 allows remote attackers to cause a denial of service (crash) by sending a Session Initiation Protocol (SIP) packet without a URI and SIP-version header, which results in a NULL pointer dereference.

Exploits (1)

exploitdb WORKING POC VERIFIED
by fbffff · cdosmultiple
https://www.exploit-db.com/exploits/3407

This exploit targets a segmentation fault vulnerability in Asterisk's SIP channel driver by sending a malformed REGISTER request. The PoC demonstrates a DoS condition by crashing the Asterisk server.

Classification
Working Poc 95%
Attack Type
Dos
Complexity
Trivial
Reliability
Reliable
Target: Asterisk versions before 1.2.16 and 1.4.1
No auth needed
Prerequisites: Network access to the target Asterisk server's SIP port (UDP 5060)
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (15)

Core 15
Core References
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/0830
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/22838
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/33888
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/24578
Various Sources x_refsource_confirm
http://asterisk.org/node/48319
Vendor Advisory vendor-advisory x_refsource_suse
http://www.novell.com/linux/security/advisories/2007_34_asterisk.html
Various Sources x_refsource_confirm
http://asterisk.org/node/48320
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/24380
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/32830
Third Party Advisory vendor-advisory x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-200703-14.xml
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/25582
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1017723
US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/228032
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2007/dsa-1358

Scores

EPSS 0.2027
EPSS Percentile 97.1%

Details

Status published
Products (18)
digium/asterisk 1.2.0_beta1
digium/asterisk 1.2.0_beta2
digium/asterisk 1.2.6
digium/asterisk 1.2.7
digium/asterisk 1.2.8
digium/asterisk 1.2.9
digium/asterisk 1.2.10
digium/asterisk 1.2.11
digium/asterisk 1.2.12
digium/asterisk 1.2.12.1
... and 8 more
Published Mar 07, 2007
Tracked Since Feb 18, 2026