CVE-2012-5976

Asterisk < 1.8.19.0 - Denial of Service via TCP Data in SIP, HTTP, or XMPP Protocol

Title source: llm
STIX 2.1

Description

Multiple stack consumption vulnerabilities in Asterisk Open Source 1.8.x before 1.8.19.1, 10.x before 10.11.1, and 11.x before 11.1.2; Certified Asterisk 1.8.11 before 1.8.11-cert10; and Asterisk Digiumphones 10.x-digiumphones before 10.11.1-digiumphones allow remote attackers to cause a denial of service (daemon crash) via TCP data using the (1) SIP, (2) HTTP, or (3) XMPP protocol.

References (2)

Core 2
Core References
Vendor Advisory x_refsource_confirm
http://downloads.asterisk.org/pub/security/AST-2012-014
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2013/dsa-2605

Scores

EPSS 0.0303
EPSS Percentile 85.9%

Details

CWE
CWE-119
Status published
Products (24)
digium/asterisk 1.8.0 (10 CPE variants)
digium/asterisk 1.8.1 (2 CPE variants)
digium/asterisk 1.8.1.1
digium/asterisk 1.8.1.2
digium/asterisk 1.8.2
digium/asterisk 1.8.2.1
digium/asterisk 1.8.2.2
digium/asterisk 1.8.2.3
digium/asterisk 1.8.2.4
digium/asterisk 1.8.3 (4 CPE variants)
... and 14 more
Published Jan 04, 2013
Tracked Since Feb 18, 2026