CVE-2009-0871

2009-03-1114:19:00

Debian Security Bug Tracker

security-tracker.debian.org

0.025 Low

EPSS

Percentile

90.1%

JSON

The SIP channel driver in Asterisk Open Source 1.4.22, 1.4.23, and 1.4.23.1; 1.6.0 before 1.6.0.6; 1.6.1 before 1.6.1.0-rc2; and Asterisk Business Edition C.2.3, with the pedantic option enabled, allows remote authenticated users to cause a denial of service (crash) via a SIP INVITE request without any headers, which triggers a NULL pointer dereference in the (1) sip_uri_headers_cmp and (2) sip_uri_params_cmp functions.

OSVersionArchitecturePackageVersionFilename
Debian11allasterisk< 1:16.28.0~dfsg-0+deb11u3asterisk_1:16.28.0~dfsg-0+deb11u3_all.deb
Debian10allasterisk< 1:16.2.1~dfsg-1+deb10u2asterisk_1:16.2.1~dfsg-1+deb10u2_all.deb
Debian999allasterisk< 1:20.6.0~dfsg+~cs6.13.40431414-2asterisk_1:20.6.0~dfsg+~cs6.13.40431414-2_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	11	all	asterisk	< 1:16.28.0~dfsg-0+deb11u3	asterisk_1:16.28.0~dfsg-0+deb11u3_all.deb
Debian	10	all	asterisk	< 1:16.2.1~dfsg-1+deb10u2	asterisk_1:16.2.1~dfsg-1+deb10u2_all.deb
Debian	999	all	asterisk	< 1:20.6.0~dfsg+~cs6.13.40431414-2	asterisk_1:20.6.0~dfsg+~cs6.13.40431414-2_all.deb

0.025 Low

EPSS

Percentile

90.1%

JSON

Related for DEBIANCVE:CVE-2009-0871