Lucene search

MitreCVE-2012-3863

HistoryJul 09, 2012 - 10:20 a.m.

CVE-2012-3863

2012-07-0910:20:44

CWE-399

mitre

web.nvd.nist.gov

asterisk

open source

sip

rtp

vulnerability

cve-2012-3863

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

AI Score

6.1

Confidence

Low

EPSS

0.01

Percentile

84.0%

JSON

channels/chan_sip.c in Asterisk Open Source 1.8.x before 1.8.13.1 and 10.x before 10.5.2, Asterisk Business Edition C.3.x before C.3.7.5, Certified Asterisk 1.8.11-certx before 1.8.11-cert4, and Asterisk Digiumphones 10.x.x-digiumphones before 10.5.2-digiumphones does not properly handle a provisional response to a SIP reINVITE request, which allows remote authenticated users to cause a denial of service (RTP port exhaustion) via sessions that lack final responses.

Affected configurations

Nvd

Node

digiumasterisk_business_editionMatchc.3.1

digiumasterisk_business_editionMatchc.3.3

digiumasterisk_business_editionMatchc.3.7.4

Node

digiumasteriskMatch1.8.0

digiumasteriskMatch1.8.0beta1

digiumasteriskMatch1.8.0beta2

digiumasteriskMatch1.8.0beta3

digiumasteriskMatch1.8.0beta4

digiumasteriskMatch1.8.0beta5

digiumasteriskMatch1.8.0rc2

digiumasteriskMatch1.8.0rc3

digiumasteriskMatch1.8.0rc4

digiumasteriskMatch1.8.0rc5

digiumasteriskMatch1.8.1

digiumasteriskMatch1.8.1rc1

digiumasteriskMatch1.8.1.1

digiumasteriskMatch1.8.1.2

digiumasteriskMatch1.8.2

digiumasteriskMatch1.8.2.1

digiumasteriskMatch1.8.2.2

digiumasteriskMatch1.8.2.3

digiumasteriskMatch1.8.2.4

digiumasteriskMatch1.8.3

digiumasteriskMatch1.8.3rc1

digiumasteriskMatch1.8.3rc2

digiumasteriskMatch1.8.3rc3

digiumasteriskMatch1.8.3.1

digiumasteriskMatch1.8.3.2

digiumasteriskMatch1.8.3.3

digiumasteriskMatch1.8.4

digiumasteriskMatch1.8.4rc1

digiumasteriskMatch1.8.4rc2

digiumasteriskMatch1.8.4rc3

digiumasteriskMatch1.8.4.1

digiumasteriskMatch1.8.4.2

digiumasteriskMatch1.8.4.3

digiumasteriskMatch1.8.4.4

digiumasteriskMatch1.8.5

digiumasteriskMatch1.8.5rc1

digiumasteriskMatch1.8.5.0

digiumasteriskMatch1.8.6.0

digiumasteriskMatch1.8.6.0rc1

digiumasteriskMatch1.8.6.0rc2

digiumasteriskMatch1.8.6.0rc3

digiumasteriskMatch1.8.7.0

digiumasteriskMatch1.8.7.0rc1

digiumasteriskMatch1.8.7.0rc2

digiumasteriskMatch1.8.7.1

digiumasteriskMatch1.8.8.0

digiumasteriskMatch1.8.8.0rc1

digiumasteriskMatch1.8.8.0rc2

digiumasteriskMatch1.8.8.0rc3

digiumasteriskMatch1.8.8.0rc5

digiumasteriskMatch1.8.8.1

digiumasteriskMatch1.8.8.2

digiumasteriskMatch1.8.9.0

digiumasteriskMatch1.8.9.0rc1

digiumasteriskMatch1.8.9.0rc2

digiumasteriskMatch1.8.9.0rc3

digiumasteriskMatch1.8.9.2

digiumasteriskMatch1.8.9.3

digiumasteriskMatch1.8.11.0

digiumasteriskMatch1.8.11.0rc2

digiumasteriskMatch1.8.11.0rc3

digiumasteriskMatch1.8.11.1

digiumasteriskMatch1.8.13.0

digiumasteriskMatch1.8.13.0rc1

digiumasteriskMatch1.8.13.0rc2

digiumasteriskeMatch1.8.8.0rc4

digiumasteriskeMatch1.8.9.1

digiumcertified_asteriskMatch1.8.11cert

digiumcertified_asteriskMatch1.8.11cert1

Node

digiumasteriskMatch10.0.0digiumphones

digiumasteriskMatch10.0.0beta1digiumphones

digiumasteriskMatch10.0.0beta2digiumphones

digiumasteriskMatch10.0.0rc1digiumphones

digiumasteriskMatch10.0.0rc2digiumphones

digiumasteriskMatch10.0.0rc3digiumphones

digiumasteriskMatch10.1.0digiumphones

digiumasteriskMatch10.1.0rc1digiumphones

digiumasteriskMatch10.1.0rc2digiumphones

digiumasteriskMatch10.2.0digiumphones

digiumasteriskMatch10.2.0rc1digiumphones

digiumasteriskMatch10.2.0rc2digiumphones

digiumasteriskMatch10.2.0rc3digiumphones

digiumasteriskMatch10.2.0rc4digiumphones

digiumasteriskMatch10.3.0digiumphones

digiumasteriskMatch10.3.0rc2digiumphones

digiumasteriskMatch10.3.0rc3digiumphones

digiumasteriskMatch10.4.0digiumphones

digiumasteriskMatch10.4.0rc1digiumphones

digiumasteriskMatch10.4.0rc2digiumphones

digiumasteriskMatch10.5.0digiumphones

digiumasteriskMatch10.5.0rc1digiumphones

digiumasteriskMatch10.5.0rc2digiumphones

digiumasteriskMatch10.5.1digiumphones

Node

digiumasteriskMatch10.0.0

digiumasteriskMatch10.0.0beta1

digiumasteriskMatch10.0.0beta2

digiumasteriskMatch10.0.0rc1

digiumasteriskMatch10.0.0rc2

digiumasteriskMatch10.0.0rc3

digiumasteriskMatch10.0.1

digiumasteriskMatch10.1.0

digiumasteriskMatch10.1.0rc1

digiumasteriskMatch10.1.0rc2

digiumasteriskMatch10.1.1

digiumasteriskMatch10.1.2

digiumasteriskMatch10.1.3

digiumasteriskMatch10.2.0

digiumasteriskMatch10.2.0rc1

digiumasteriskMatch10.2.0rc2

digiumasteriskMatch10.2.0rc3

digiumasteriskMatch10.2.0rc4

digiumasteriskMatch10.2.1

digiumasteriskMatch10.3.0

digiumasteriskMatch10.3.0rc2

digiumasteriskMatch10.3.0rc3

digiumasteriskMatch10.3.1

digiumasteriskMatch10.4.0

digiumasteriskMatch10.4.0rc1

digiumasteriskMatch10.4.0rc2

digiumasteriskMatch10.4.0rc3

digiumasteriskMatch10.4.1

digiumasteriskMatch10.4.2

digiumasteriskMatch10.5.0

digiumasteriskMatch10.5.0rc1

digiumasteriskMatch10.5.0rc2

digiumasteriskMatch10.5.1

Node

digiumcertified_asteriskMatch1.8.11cert

digiumcertified_asteriskMatch1.8.11cert1

digiumcertified_asteriskMatch1.8.11cert2

digiumcertified_asteriskMatch1.8.11cert3

VendorProductVersionCPE
digiumasterisk_business_editionc.3.1cpe:2.3:a:digium:asterisk_business_edition:c.3.1:*:*:*:*:*:*:*
digiumasterisk_business_editionc.3.3cpe:2.3:a:digium:asterisk_business_edition:c.3.3:*:*:*:*:*:*:*
digiumasterisk_business_editionc.3.7.4cpe:2.3:a:digium:asterisk_business_edition:c.3.7.4:*:*:*:*:*:*:*
digiumasterisk1.8.0cpe:2.3:a:digium:asterisk:1.8.0:*:*:*:*:*:*:*
digiumasterisk1.8.0cpe:2.3:a:digium:asterisk:1.8.0:beta1:*:*:*:*:*:*
digiumasterisk1.8.0cpe:2.3:a:digium:asterisk:1.8.0:beta2:*:*:*:*:*:*
digiumasterisk1.8.0cpe:2.3:a:digium:asterisk:1.8.0:beta3:*:*:*:*:*:*
digiumasterisk1.8.0cpe:2.3:a:digium:asterisk:1.8.0:beta4:*:*:*:*:*:*
digiumasterisk1.8.0cpe:2.3:a:digium:asterisk:1.8.0:beta5:*:*:*:*:*:*
digiumasterisk1.8.0cpe:2.3:a:digium:asterisk:1.8.0:rc2:*:*:*:*:*:*

Vendor	Product	Version	CPE
digium	asterisk_business_edition	c.3.1	cpe:2.3:a:digium:asterisk_business_edition:c.3.1:::::::*
digium	asterisk_business_edition	c.3.3	cpe:2.3:a:digium:asterisk_business_edition:c.3.3:::::::*
digium	asterisk_business_edition	c.3.7.4	cpe:2.3:a:digium:asterisk_business_edition:c.3.7.4:::::::*
digium	asterisk	1.8.0	cpe:2.3:a:digium:asterisk:1.8.0:::::::*
digium	asterisk	1.8.0	cpe:2.3:a:digium:asterisk:1.8.0:beta1::::::
digium	asterisk	1.8.0	cpe:2.3:a:digium:asterisk:1.8.0:beta2::::::
digium	asterisk	1.8.0	cpe:2.3:a:digium:asterisk:1.8.0:beta3::::::
digium	asterisk	1.8.0	cpe:2.3:a:digium:asterisk:1.8.0:beta4::::::
digium	asterisk	1.8.0	cpe:2.3:a:digium:asterisk:1.8.0:beta5::::::
digium	asterisk	1.8.0	cpe:2.3:a:digium:asterisk:1.8.0:rc2::::::