Lucene search

[email protected]CVE-2012-2416

HistoryApr 30, 2012 - 8:55 p.m.

CVE-2012-2416

2012-04-3020:55:02

CWE-119

[email protected]

web.nvd.nist.gov

asterisk

sip

cve-2012-2416

security vulnerability

trustrpid

denial of service

nvd

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

6 Medium

AI Score

Confidence

Low

0.058 Low

EPSS

Percentile

93.4%

JSON

chan_sip.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.11.1 and 10.x before 10.3.1 and Asterisk Business Edition C.3.x before C.3.7.4, when the trustrpid option is enabled, allows remote authenticated users to cause a denial of service (daemon crash) by sending a SIP UPDATE message that triggers a connected-line update attempt without an associated channel.

Affected configurations

NVD

Node

asteriskopen_sourceMatch1.6.2.0

asteriskopen_sourceMatch1.6.2.0rc2

asteriskopen_sourceMatch1.6.2.0rc3

asteriskopen_sourceMatch1.6.2.0rc4

asteriskopen_sourceMatch1.6.2.0rc5

asteriskopen_sourceMatch1.6.2.0rc6

asteriskopen_sourceMatch1.6.2.0rc7

asteriskopen_sourceMatch1.6.2.0rc8

asteriskopen_sourceMatch1.6.2.1

asteriskopen_sourceMatch1.6.2.1rc1

asteriskopen_sourceMatch1.6.2.2

asteriskopen_sourceMatch1.6.2.3rc2

asteriskopen_sourceMatch1.6.2.4

asteriskopen_sourceMatch1.6.2.5

asteriskopen_sourceMatch1.6.2.6

asteriskopen_sourceMatch1.6.2.6rc1

asteriskopen_sourceMatch1.6.2.6rc2

asteriskopen_sourceMatch1.6.2.7

asteriskopen_sourceMatch1.6.2.7rc1

asteriskopen_sourceMatch1.6.2.7rc2

asteriskopen_sourceMatch1.6.2.7rc3

asteriskopen_sourceMatch1.6.2.8

asteriskopen_sourceMatch1.6.2.8rc1

asteriskopen_sourceMatch1.6.2.9

asteriskopen_sourceMatch1.6.2.9rc1

asteriskopen_sourceMatch1.6.2.9rc2

asteriskopen_sourceMatch1.6.2.9rc3

asteriskopen_sourceMatch1.6.2.10

asteriskopen_sourceMatch1.6.2.10rc1

asteriskopen_sourceMatch1.6.2.10rc2

asteriskopen_sourceMatch1.6.2.11

asteriskopen_sourceMatch1.6.2.11rc1

asteriskopen_sourceMatch1.6.2.11rc2

asteriskopen_sourceMatch1.6.2.12

asteriskopen_sourceMatch1.6.2.12rc1

asteriskopen_sourceMatch1.6.2.13

asteriskopen_sourceMatch1.6.2.14

asteriskopen_sourceMatch1.6.2.14rc1

asteriskopen_sourceMatch1.6.2.15

asteriskopen_sourceMatch1.6.2.15rc1

asteriskopen_sourceMatch1.6.2.15.1

asteriskopen_sourceMatch1.6.2.16

asteriskopen_sourceMatch1.6.2.16rc1

asteriskopen_sourceMatch1.6.2.16.1

asteriskopen_sourceMatch1.6.2.16.2

asteriskopen_sourceMatch1.6.2.17

asteriskopen_sourceMatch1.6.2.17rc1

asteriskopen_sourceMatch1.6.2.17rc2

asteriskopen_sourceMatch1.6.2.17rc3

asteriskopen_sourceMatch1.6.2.17.1

asteriskopen_sourceMatch1.6.2.17.2

asteriskopen_sourceMatch1.6.2.17.3

asteriskopen_sourceMatch1.6.2.18

asteriskopen_sourceMatch1.6.2.18rc1

asteriskopen_sourceMatch1.6.2.18.1

asteriskopen_sourceMatch1.6.2.18.2

asteriskopen_sourceMatch1.6.2.19

asteriskopen_sourceMatch1.6.2.19rc1

asteriskopen_sourceMatch1.6.2.20

asteriskopen_sourceMatch1.6.2.21

asteriskopen_sourceMatch1.6.2.22

asteriskopen_sourceMatch1.6.2.23

Node

asteriskopen_sourceMatch1.8.0

asteriskopen_sourceMatch1.8.0beta1

asteriskopen_sourceMatch1.8.0beta2

asteriskopen_sourceMatch1.8.0beta3

asteriskopen_sourceMatch1.8.0beta4

asteriskopen_sourceMatch1.8.0beta5

asteriskopen_sourceMatch1.8.0rc2

asteriskopen_sourceMatch1.8.0rc3

asteriskopen_sourceMatch1.8.0rc4

asteriskopen_sourceMatch1.8.0rc5

asteriskopen_sourceMatch1.8.1

asteriskopen_sourceMatch1.8.1rc1

asteriskopen_sourceMatch1.8.1.1

asteriskopen_sourceMatch1.8.1.2

asteriskopen_sourceMatch1.8.2

asteriskopen_sourceMatch1.8.2rc1

asteriskopen_sourceMatch1.8.2.1

asteriskopen_sourceMatch1.8.2.2

asteriskopen_sourceMatch1.8.2.3

asteriskopen_sourceMatch1.8.2.4

asteriskopen_sourceMatch1.8.3

asteriskopen_sourceMatch1.8.3rc1

asteriskopen_sourceMatch1.8.3rc2

asteriskopen_sourceMatch1.8.3rc3

asteriskopen_sourceMatch1.8.3.1

asteriskopen_sourceMatch1.8.3.2

asteriskopen_sourceMatch1.8.3.3

asteriskopen_sourceMatch1.8.4

asteriskopen_sourceMatch1.8.4rc1

asteriskopen_sourceMatch1.8.4rc2

asteriskopen_sourceMatch1.8.4rc3

asteriskopen_sourceMatch1.8.4.1

asteriskopen_sourceMatch1.8.4.2

asteriskopen_sourceMatch1.8.4.3

asteriskopen_sourceMatch1.8.4.4

asteriskopen_sourceMatch1.8.5rc1

asteriskopen_sourceMatch1.8.5.0

asteriskopen_sourceMatch1.8.6.0

asteriskopen_sourceMatch1.8.6.0rc1

asteriskopen_sourceMatch1.8.6.0rc2

asteriskopen_sourceMatch1.8.6.0rc3

asteriskopen_sourceMatch1.8.7.0

asteriskopen_sourceMatch1.8.7.0rc1

asteriskopen_sourceMatch1.8.7.0rc2

asteriskopen_sourceMatch1.8.7.1

asteriskopen_sourceMatch1.8.7.2

asteriskopen_sourceMatch1.8.8.0

asteriskopen_sourceMatch1.8.8.0rc1

asteriskopen_sourceMatch1.8.8.0rc2

asteriskopen_sourceMatch1.8.8.0rc3

asteriskopen_sourceMatch1.8.8.0rc4

asteriskopen_sourceMatch1.8.8.0rc5

asteriskopen_sourceMatch1.8.8.1

asteriskopen_sourceMatch1.8.8.2

asteriskopen_sourceMatch1.8.9.0

asteriskopen_sourceMatch1.8.9.0rc1

asteriskopen_sourceMatch1.8.9.0rc2

asteriskopen_sourceMatch1.8.9.0rc3

asteriskopen_sourceMatch1.8.9.1

asteriskopen_sourceMatch1.8.9.2

asteriskopen_sourceMatch1.8.9.3

asteriskopen_sourceMatch1.8.10.0

asteriskopen_sourceMatch1.8.10.0rc1

asteriskopen_sourceMatch1.8.10.0rc2

asteriskopen_sourceMatch1.8.10.0rc3

asteriskopen_sourceMatch1.8.10.0rc4

asteriskopen_sourceMatch1.8.10.1

asteriskopen_sourceMatch1.8.11.0rc2

asteriskopen_sourceMatch1.8.11.0rc3

Node

asteriskopen_sourceMatch10.0.0

asteriskopen_sourceMatch10.0.0beta1

asteriskopen_sourceMatch10.0.0beta2

asteriskopen_sourceMatch10.0.0rc1

asteriskopen_sourceMatch10.0.0rc2

asteriskopen_sourceMatch10.0.0rc3

asteriskopen_sourceMatch10.0.1

asteriskopen_sourceMatch10.1.0

asteriskopen_sourceMatch10.1.0rc1

asteriskopen_sourceMatch10.1.0rc2

asteriskopen_sourceMatch10.1.1

asteriskopen_sourceMatch10.1.2

asteriskopen_sourceMatch10.1.3

asteriskopen_sourceMatch10.2.0

asteriskopen_sourceMatch10.2.0rc1

asteriskopen_sourceMatch10.2.0rc2

asteriskopen_sourceMatch10.2.0rc3

asteriskopen_sourceMatch10.2.0rc4

asteriskopen_sourceMatch10.2.1

asteriskopen_sourceMatch10.3.0

asteriskopen_sourceMatch10.3.0rc2

asteriskopen_sourceMatch10.3.0rc3

CPENameOperatorVersion
asterisk:open_sourceasterisk open sourceeq1.6.2.0
asterisk:open_sourceasterisk open sourceeq1.6.2.1
asterisk:open_sourceasterisk open sourceeq1.6.2.2
asterisk:open_sourceasterisk open sourceeq1.6.2.3
asterisk:open_sourceasterisk open sourceeq1.6.2.4
asterisk:open_sourceasterisk open sourceeq1.6.2.5
asterisk:open_sourceasterisk open sourceeq1.6.2.6
asterisk:open_sourceasterisk open sourceeq1.6.2.7
asterisk:open_sourceasterisk open sourceeq1.6.2.8
asterisk:open_sourceasterisk open sourceeq1.6.2.9

CPE	Name	Operator	Version
asterisk:open_source	asterisk open source	eq	1.6.2.0
asterisk:open_source	asterisk open source	eq	1.6.2.1
asterisk:open_source	asterisk open source	eq	1.6.2.2
asterisk:open_source	asterisk open source	eq	1.6.2.3
asterisk:open_source	asterisk open source	eq	1.6.2.4
asterisk:open_source	asterisk open source	eq	1.6.2.5
asterisk:open_source	asterisk open source	eq	1.6.2.6
asterisk:open_source	asterisk open source	eq	1.6.2.7
asterisk:open_source	asterisk open source	eq	1.6.2.8
asterisk:open_source	asterisk open source	eq	1.6.2.9