Lucene search

MitreCVE-2012-0885

HistoryJan 25, 2012 - 3:55 p.m.

CVE-2012-0885

2012-01-2515:55:01

mitre

web.nvd.nist.gov

asterisk

open source

1.8.x

10.x

1.8.8.2

10.0.1

null pointer dereference

daemon crash

sdp message

res_srtp module

denial of service

cve-2012-0885

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

6.5

Confidence

Low

EPSS

0.018

Percentile

88.4%

JSON

chan_sip.c in Asterisk Open Source 1.8.x before 1.8.8.2 and 10.x before 10.0.1, when the res_srtp module is used and media support is improperly configured, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted SDP message with a crypto attribute and a (1) video or (2) text media type, as demonstrated by CSipSimple.

Affected configurations

Nvd

Node

asteriskopen_sourceMatch1.8.0

asteriskopen_sourceMatch1.8.0beta1

asteriskopen_sourceMatch1.8.0beta2

asteriskopen_sourceMatch1.8.0beta3

asteriskopen_sourceMatch1.8.0beta4

asteriskopen_sourceMatch1.8.0beta5

asteriskopen_sourceMatch1.8.0rc2

asteriskopen_sourceMatch1.8.0rc3

asteriskopen_sourceMatch1.8.0rc4

asteriskopen_sourceMatch1.8.0rc5

asteriskopen_sourceMatch1.8.1

asteriskopen_sourceMatch1.8.1rc1

asteriskopen_sourceMatch1.8.1.1

asteriskopen_sourceMatch1.8.1.2

asteriskopen_sourceMatch1.8.2

asteriskopen_sourceMatch1.8.2rc1

asteriskopen_sourceMatch1.8.2.1

asteriskopen_sourceMatch1.8.2.2

asteriskopen_sourceMatch1.8.2.3

asteriskopen_sourceMatch1.8.2.4

asteriskopen_sourceMatch1.8.3

asteriskopen_sourceMatch1.8.3rc1

asteriskopen_sourceMatch1.8.3rc2

asteriskopen_sourceMatch1.8.3rc3

asteriskopen_sourceMatch1.8.3.1

asteriskopen_sourceMatch1.8.3.2

asteriskopen_sourceMatch1.8.3.3

asteriskopen_sourceMatch1.8.4

asteriskopen_sourceMatch1.8.4rc1

asteriskopen_sourceMatch1.8.4rc2

asteriskopen_sourceMatch1.8.4rc3

asteriskopen_sourceMatch1.8.4.1

asteriskopen_sourceMatch1.8.4.2

asteriskopen_sourceMatch1.8.4.3

asteriskopen_sourceMatch1.8.4.4

asteriskopen_sourceMatch1.8.5rc1

asteriskopen_sourceMatch1.8.5.0

asteriskopen_sourceMatch1.8.6.0

asteriskopen_sourceMatch1.8.6.0rc1

asteriskopen_sourceMatch1.8.6.0rc2

asteriskopen_sourceMatch1.8.6.0rc3

asteriskopen_sourceMatch1.8.7.0

asteriskopen_sourceMatch1.8.7.0rc1

asteriskopen_sourceMatch1.8.7.0rc2

asteriskopen_sourceMatch1.8.7.1

asteriskopen_sourceMatch1.8.7.2

asteriskopen_sourceMatch1.8.8.0

asteriskopen_sourceMatch1.8.8.0rc1

asteriskopen_sourceMatch1.8.8.0rc2

asteriskopen_sourceMatch1.8.8.0rc3

asteriskopen_sourceMatch1.8.8.0rc4

asteriskopen_sourceMatch1.8.8.0rc5

asteriskopen_sourceMatch1.8.8.1

Node

asteriskopen_sourceMatch10.0.0

asteriskopen_sourceMatch10.0.0beta1

asteriskopen_sourceMatch10.0.0beta2

asteriskopen_sourceMatch10.0.0rc1

asteriskopen_sourceMatch10.0.0rc2

asteriskopen_sourceMatch10.0.0rc3

VendorProductVersionCPE
asteriskopen_source1.8.0cpe:2.3:a:asterisk:open_source:1.8.0:*:*:*:*:*:*:*
asteriskopen_source1.8.0cpe:2.3:a:asterisk:open_source:1.8.0:beta1:*:*:*:*:*:*
asteriskopen_source1.8.0cpe:2.3:a:asterisk:open_source:1.8.0:beta2:*:*:*:*:*:*
asteriskopen_source1.8.0cpe:2.3:a:asterisk:open_source:1.8.0:beta3:*:*:*:*:*:*
asteriskopen_source1.8.0cpe:2.3:a:asterisk:open_source:1.8.0:beta4:*:*:*:*:*:*
asteriskopen_source1.8.0cpe:2.3:a:asterisk:open_source:1.8.0:beta5:*:*:*:*:*:*
asteriskopen_source1.8.0cpe:2.3:a:asterisk:open_source:1.8.0:rc2:*:*:*:*:*:*
asteriskopen_source1.8.0cpe:2.3:a:asterisk:open_source:1.8.0:rc3:*:*:*:*:*:*
asteriskopen_source1.8.0cpe:2.3:a:asterisk:open_source:1.8.0:rc4:*:*:*:*:*:*
asteriskopen_source1.8.0cpe:2.3:a:asterisk:open_source:1.8.0:rc5:*:*:*:*:*:*

Vendor	Product	Version	CPE
asterisk	open_source	1.8.0	cpe:2.3:a:asterisk:open_source:1.8.0:::::::*
asterisk	open_source	1.8.0	cpe:2.3:a:asterisk:open_source:1.8.0:beta1::::::
asterisk	open_source	1.8.0	cpe:2.3:a:asterisk:open_source:1.8.0:beta2::::::
asterisk	open_source	1.8.0	cpe:2.3:a:asterisk:open_source:1.8.0:beta3::::::
asterisk	open_source	1.8.0	cpe:2.3:a:asterisk:open_source:1.8.0:beta4::::::
asterisk	open_source	1.8.0	cpe:2.3:a:asterisk:open_source:1.8.0:beta5::::::
asterisk	open_source	1.8.0	cpe:2.3:a:asterisk:open_source:1.8.0:rc2::::::
asterisk	open_source	1.8.0	cpe:2.3:a:asterisk:open_source:1.8.0:rc3::::::
asterisk	open_source	1.8.0	cpe:2.3:a:asterisk:open_source:1.8.0:rc4::::::
asterisk	open_source	1.8.0	cpe:2.3:a:asterisk:open_source:1.8.0:rc5::::::