Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2006-5444HistoryOct 23, 2006 - 5:07 p.m.
CVE-2006-5444
2006-10-2317:07:00
Debian Security Bug Tracker
security-tracker.debian.org
8
0.969 High
EPSS
Percentile
99.7%
Integer overflow in the get_input function in the Skinny channel driver (chan_skinny.c) in Asterisk 1.0.x before 1.0.12 and 1.2.x before 1.2.13, as used by Cisco SCCP phones, allows remote attackers to execute arbitrary code via a certain dlen value that passes a signed integer comparison and leads to a heap-based buffer overflow.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 11 | all | asterisk | < 1:1.2.13~dfsg-1 | asterisk_1:1.2.13~dfsg-1_all.deb |
| Debian | 10 | all | asterisk | < 1:1.2.13~dfsg-1 | asterisk_1:1.2.13~dfsg-1_all.deb |
| Debian | 999 | all | asterisk | < 1:1.2.13~dfsg-1 | asterisk_1:1.2.13~dfsg-1_all.deb |
Related
openvas
openvas
Debian: Security Advisory (DSA-1229-1)
2008-01-17 00:00:00
FreeBSD Ports: asterisk, asterisk-bristuff
2008-09-04 00:00:00
Debian Security Advisory DSA 1229-1 (asterisk)
2008-01-17 00:00:00
cert
cert
nessus
nessus
Debian DSA-1229-1 : asterisk - integer overflow
2006-12-11 00:00:00
SUSE-SA:2006:069: asterisk
2007-02-18 00:00:00
ubuntucve
ubuntucve
CVE-2006-5444
2006-10-23 00:00:00
cve
cve
CVE-2006-5444
2006-10-23 17:07:00
debian
debian
[SECURITY] [DSA 1229-1] New Asterisk packages fix arbitrary code execution
2006-12-06 00:00:00
cvelist
cvelist
CVE-2006-5444
2006-10-23 17:00:00
suse
suse
remote denial of service in asterisk
2006-11-16 19:14:32
gentoo
gentoo
Asterisk: Multiple vulnerabilities
2006-10-30 00:00:00