Lucene search
MitreCVELIST:CVE-2013-2686HistoryOct 03, 2022 - 4:14 p.m.
CVE-2013-2686
2022-10-0316:14:59
mitre
www.cve.org
6
asterisk
http server
stack-consumption
denial of service
http post request
main/http.c in the HTTP server in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x before 10.12.2, and 11.x before 11.2.2; Certified Asterisk 1.8.15 before 1.8.15-cert2; and Asterisk Digiumphones 10.x-digiumphones before 10.12.2-digiumphones does not properly restrict Content-Length values, which allows remote attackers to conduct stack-consumption attacks and cause a denial of service (daemon crash) via a crafted HTTP POST request. NOTE: this vulnerability exists because of an incorrect fix for CVE-2012-5976.
Related
cve
cve
CVE-2013-2686
2022-10-03 16:14:59
CVE-2012-5976
2013-01-04 11:52:14
checkpoint_advisories
checkpoint_advisories
prion
prion
Design/Logic Flaw
2013-04-01 16:55:00
Stack overflow
2013-01-04 11:52:00
ubuntucve
ubuntucve
CVE-2013-2686
2013-04-01 00:00:00
CVE-2012-5976
2013-01-04 00:00:00
nvd
nvd
CVE-2013-2686
2013-04-01 16:55:04
CVE-2012-5976
2013-01-04 11:52:14
debiancve
debiancve
CVE-2013-2686
2022-10-03 16:14:59
CVE-2012-5976
2013-01-04 11:52:14
nessus
nessus
Mandriva Linux Security Advisory : asterisk (MDVSA-2013:140)
2013-04-20 00:00:00
Asterisk HTTP Content-Length Header DoS (AST-2013-002)
2013-04-10 00:00:00
Fedora 16 : asterisk-1.8.20.0-1.fc16 (2013-0992)
2013-01-31 00:00:00
cvelist
cvelist
CVE-2012-5976
2013-01-04 11:00:00
securityvulns
securityvulns
AST-2012-014: Crashes due to large stack allocations when using TCP
2013-01-05 00:00:00
AST-2013-002: Denial of Service in HTTP server
2013-04-01 00:00:00
Asterisk security vulnerabilities
2013-01-05 00:00:00
openvas
openvas
Fedora Update for asterisk FEDORA-2013-0992
2013-01-31 00:00:00
Debian: Security Advisory (DSA-2605-1)
2013-01-18 00:00:00
Fedora Update for asterisk FEDORA-2013-0992
2013-01-31 00:00:00
fedora
fedora
[SECURITY] Fedora 18 Update: asterisk-11.2.0-1.fc18
2013-01-30 00:33:07
[SECURITY] Fedora 16 Update: asterisk-1.8.20.0-1.fc16
2013-01-30 00:55:24
[SECURITY] Fedora 17 Update: asterisk-10.12.0-1.fc17
2013-01-30 00:36:44
freebsd
freebsd
asterisk -- multiple vulnerabilities
2013-01-02 00:00:00
asterisk -- multiple vulnerabilities
2013-03-27 00:00:00
debian
debian
[SECURITY] [DSA 2605-2] asterisk regression update
2013-01-19 14:01:19
[SECURITY] [DSA 2605-1] asterisk security update
2013-01-13 20:36:39
osv
osv
asterisk - several issues
2013-01-19 00:00:00
gentoo
gentoo
Asterisk: Multiple vulnerabilities
2014-01-21 00:00:00
