CVE-2012-2947

Asterisk Open Source <10.4.1 & Certified Asterisk <1.8.11-cert2 - DoS

Title source: llm
STIX 2.1

Description

chan_iax2.c in the IAX2 channel driver in Certified Asterisk 1.8.11-cert before 1.8.11-cert2 and Asterisk Open Source 1.8.x before 1.8.12.1 and 10.x before 10.4.1, when a certain mohinterpret setting is enabled, allows remote attackers to cause a denial of service (daemon crash) by placing a call on hold.

References (5)

Core 5
Core References
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2012/dsa-2493
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1027102
Broken Link mailing-list x_refsource_bugtraq
http://archives.neohapsis.com/archives/bugtraq/2012-05/0144.html
Not Applicable third-party-advisory x_refsource_secunia
http://secunia.com/advisories/49303

Scores

EPSS 0.0233
EPSS Percentile 81.5%

Details

CWE
CWE-284
Status published
Products (25)
debian/debian_linux 6.0
digium/asterisk 1.8.0 (10 CPE variants)
digium/asterisk 1.8.1 (2 CPE variants)
digium/asterisk 1.8.1.1
digium/asterisk 1.8.1.2
digium/asterisk 1.8.2
digium/asterisk 1.8.2.1
digium/asterisk 1.8.2.2
digium/asterisk 1.8.2.3
digium/asterisk 1.8.2.4
... and 15 more
Published Jun 02, 2012
Tracked Since Feb 18, 2026