Lucene search
HistoryApr 01, 2013 - 4:55 p.m.
CVE-2013-2685
cve-2013-2685
asterisk
buffer overflow
security
vulnerability
7.7 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.447 Medium
EPSS
Percentile
97.3%
Stack-based buffer overflow in res/res_format_attr_h264.c in Asterisk Open Source 11.x before 11.2.2 allows remote attackers to execute arbitrary code via a long sprop-parameter-sets H.264 media attribute in a SIP Session Description Protocol (SDP) header.
Related
nessus
nessus
Asterisk SIP SDP Buffer Overflow (AST-2013-001)
2013-04-10 00:00:00
Fedora 18 : asterisk-11.2.2-1.fc18 (2013-4566)
2013-04-08 00:00:00
ubuntucve
ubuntucve
CVE-2013-2685
2013-04-01 00:00:00
debiancve
debiancve
CVE-2013-2685
2013-04-01 16:55:00
openvas
openvas
Fedora Update for asterisk FEDORA-2013-4566
2013-04-08 00:00:00
Fedora Update for asterisk FEDORA-2013-4566
2013-04-08 00:00:00
Gentoo Security Advisory GLSA 201401-15
2015-09-29 00:00:00
checkpoint_advisories
checkpoint_advisories
Digium Asterisk SIP SDP Header Parsing Stack Buffer Overflow (CVE-2013-2685)
2013-06-30 00:00:00
fedora
fedora
[SECURITY] Fedora 18 Update: asterisk-11.2.2-1.fc18
2013-04-07 00:28:33
prion
prion
Stack overflow
2013-04-01 16:55:00
securityvulns
securityvulns
AST-2013-001: Buffer Overflow Exploit Through SIP SDP Header
2013-04-01 00:00:00
Asterisk multiple security vulnerabilities
2013-04-01 00:00:00
freebsd
freebsd
asterisk -- multiple vulnerabilities
2013-03-27 00:00:00
gentoo
gentoo
Asterisk: Multiple vulnerabilities
2014-01-21 00:00:00
7.7 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.447 Medium
EPSS
Percentile
97.3%
Related for CVE-2013-2685