Lucene search
HistoryDec 02, 2009 - 11:30 a.m.
CVE-2009-4055
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
6.3 Medium
AI Score
Confidence
Low
0.126 Low
EPSS
Percentile
95.5%
rtp.c in Asterisk Open Source 1.2.x before 1.2.37, 1.4.x before 1.4.27.1, 1.6.0.x before 1.6.0.19, and 1.6.1.x before 1.6.1.11; Business Edition B.x.x before B.2.5.13, C.2.x.x before C.2.4.6, and C.3.x.x before C.3.2.3; and s800i 1.3.x before 1.3.0.6 allows remote attackers to cause a denial of service (daemon crash) via an RTP comfort noise payload with a long data length.
Affected configurations
Node
digiumasteriskMatch1.2.0
ORdigiumasteriskMatch1.2.0beta1
ORdigiumasteriskMatch1.2.0beta2
ORdigiumasteriskMatch1.2.0rc1
ORdigiumasteriskMatch1.2.0rc2
ORdigiumasteriskMatch1.2.1
ORdigiumasteriskMatch1.2.2
ORdigiumasteriskMatch1.2.2netsec
ORdigiumasteriskMatch1.2.3
ORdigiumasteriskMatch1.2.3netsec
ORdigiumasteriskMatch1.2.10
ORdigiumasteriskMatch1.2.10netsec
ORdigiumasteriskMatch1.2.11
ORdigiumasteriskMatch1.2.11netsec
ORdigiumasteriskMatch1.2.12
ORdigiumasteriskMatch1.2.12netsec
ORdigiumasteriskMatch1.2.12.1
ORdigiumasteriskMatch1.2.12.1netsec
ORdigiumasteriskMatch1.2.13
ORdigiumasteriskMatch1.2.13netsec
ORdigiumasteriskMatch1.2.14
ORdigiumasteriskMatch1.2.15
ORdigiumasteriskMatch1.2.15netsec
ORdigiumasteriskMatch1.2.16
ORdigiumasteriskMatch1.2.16netsec
ORdigiumasteriskMatch1.2.17
ORdigiumasteriskMatch1.2.17netsec
ORdigiumasteriskMatch1.2.18
ORdigiumasteriskMatch1.2.18netsec
ORdigiumasteriskMatch1.2.19
ORdigiumasteriskMatch1.2.19netsec
ORdigiumasteriskMatch1.2.20
ORdigiumasteriskMatch1.2.20netsec
ORdigiumasteriskMatch1.2.21
ORdigiumasteriskMatch1.2.21netsec
ORdigiumasteriskMatch1.2.21.1
ORdigiumasteriskMatch1.2.21.1netsec
ORdigiumasteriskMatch1.2.22
ORdigiumasteriskMatch1.2.22netsec
ORdigiumasteriskMatch1.2.23
ORdigiumasteriskMatch1.2.23netsec
ORdigiumasteriskMatch1.2.24
ORdigiumasteriskMatch1.2.24netsec
ORdigiumasteriskMatch1.2.25
ORdigiumasteriskMatch1.2.25netsec
ORdigiumasteriskMatch1.2.26
ORdigiumasteriskMatch1.2.26netsec
ORdigiumasteriskMatch1.2.26.1
ORdigiumasteriskMatch1.2.26.1netsec
ORdigiumasteriskMatch1.2.26.2
ORdigiumasteriskMatch1.2.26.2netsec
ORdigiumasteriskMatch1.2.27
ORdigiumasteriskMatch1.2.28
ORdigiumasteriskMatch1.2.28.1
ORdigiumasteriskMatch1.2.29
ORdigiumasteriskMatch1.2.30
ORdigiumasteriskMatch1.2.30.1
ORdigiumasteriskMatch1.2.30.2
ORdigiumasteriskMatch1.2.30.3
ORdigiumasteriskMatch1.2.30.4
ORdigiumasteriskMatch1.2.31
ORdigiumasteriskMatch1.2.31.1
ORdigiumasteriskMatch1.2.32
ORdigiumasteriskMatch1.2.33
ORdigiumasteriskMatch1.2.34
ORdigiumasteriskMatch1.2.35
ORdigiumasteriskMatch1.2.36
ORdigiumasteriskMatch1.4.0
ORdigiumasteriskMatch1.4.0beta1
ORdigiumasteriskMatch1.4.0beta2
ORdigiumasteriskMatch1.4.0beta3
ORdigiumasteriskMatch1.4.0beta4
ORdigiumasteriskMatch1.4.1
ORdigiumasteriskMatch1.4.2
ORdigiumasteriskMatch1.4.3
ORdigiumasteriskMatch1.4.4
ORdigiumasteriskMatch1.4.5
ORdigiumasteriskMatch1.4.6
ORdigiumasteriskMatch1.4.7
ORdigiumasteriskMatch1.4.7.1
ORdigiumasteriskMatch1.4.8
ORdigiumasteriskMatch1.4.9
ORdigiumasteriskMatch1.4.10
ORdigiumasteriskMatch1.4.10.1
ORdigiumasteriskMatch1.4.11
ORdigiumasteriskMatch1.4.12
ORdigiumasteriskMatch1.4.12.1
ORdigiumasteriskMatch1.4.13
ORdigiumasteriskMatch1.4.14
ORdigiumasteriskMatch1.4.15
ORdigiumasteriskMatch1.4.16
ORdigiumasteriskMatch1.4.16.1
ORdigiumasteriskMatch1.4.16.2
ORdigiumasteriskMatch1.4.17
ORdigiumasteriskMatch1.4.18
ORdigiumasteriskMatch1.4.19
ORdigiumasteriskMatch1.4.19rc1
ORdigiumasteriskMatch1.4.19rc2
ORdigiumasteriskMatch1.4.19rc3
ORdigiumasteriskMatch1.4.19rc4
ORdigiumasteriskMatch1.4.19.1
ORdigiumasteriskMatch1.4.19.2
ORdigiumasteriskMatch1.4.20
ORdigiumasteriskMatch1.4.20rc1
ORdigiumasteriskMatch1.4.20rc2
ORdigiumasteriskMatch1.4.20rc3
ORdigiumasteriskMatch1.4.20.1
ORdigiumasteriskMatch1.4.21
ORdigiumasteriskMatch1.4.21rc1
ORdigiumasteriskMatch1.4.21rc2
ORdigiumasteriskMatch1.4.21.1
ORdigiumasteriskMatch1.4.21.2
ORdigiumasteriskMatch1.4.22
ORdigiumasteriskMatch1.4.22rc1
ORdigiumasteriskMatch1.4.22rc2
ORdigiumasteriskMatch1.4.22rc3
ORdigiumasteriskMatch1.4.22rc4
ORdigiumasteriskMatch1.4.22rc5
ORdigiumasteriskMatch1.4.22.1
ORdigiumasteriskMatch1.4.22.2
ORdigiumasteriskMatch1.4.23
ORdigiumasteriskMatch1.4.23rc1
ORdigiumasteriskMatch1.4.23rc2
ORdigiumasteriskMatch1.4.23rc3
ORdigiumasteriskMatch1.4.23rc4
ORdigiumasteriskMatch1.4.23.1
ORdigiumasteriskMatch1.4.23.2
ORdigiumasteriskMatch1.4.24
ORdigiumasteriskMatch1.4.24rc1
ORdigiumasteriskMatch1.4.24.1
ORdigiumasteriskMatch1.4.25
ORdigiumasteriskMatch1.4.25rc1
ORdigiumasteriskMatch1.4.25.1
ORdigiumasteriskMatch1.4.26
ORdigiumasteriskMatch1.4.26rc1
ORdigiumasteriskMatch1.4.26rc2
ORdigiumasteriskMatch1.4.26rc3
ORdigiumasteriskMatch1.4.26rc4
ORdigiumasteriskMatch1.4.26rc5
ORdigiumasteriskMatch1.4.26rc6
ORdigiumasteriskMatch1.4.26.1
ORdigiumasteriskMatch1.4.26.2
ORdigiumasteriskMatch1.4.27
ORdigiumasteriskMatch1.4.27rc5
ORdigiumasteriskMatch1.6.0
ORdigiumasteriskMatch1.6.0beta1
ORdigiumasteriskMatch1.6.0beta2
ORdigiumasteriskMatch1.6.0beta3
ORdigiumasteriskMatch1.6.0beta4
ORdigiumasteriskMatch1.6.0beta5
ORdigiumasteriskMatch1.6.0beta6
ORdigiumasteriskMatch1.6.0beta7
ORdigiumasteriskMatch1.6.0beta7.1
ORdigiumasteriskMatch1.6.0beta8
ORdigiumasteriskMatch1.6.0beta9
ORdigiumasteriskMatch1.6.0rc4
ORdigiumasteriskMatch1.6.0rc5
ORdigiumasteriskMatch1.6.0rc6
ORdigiumasteriskMatch1.6.0.1
ORdigiumasteriskMatch1.6.0.2
ORdigiumasteriskMatch1.6.0.3
ORdigiumasteriskMatch1.6.0.3rc1
ORdigiumasteriskMatch1.6.0.4rc1
ORdigiumasteriskMatch1.6.0.5
ORdigiumasteriskMatch1.6.0.6
ORdigiumasteriskMatch1.6.0.7
ORdigiumasteriskMatch1.6.0.8
ORdigiumasteriskMatch1.6.0.9
ORdigiumasteriskMatch1.6.0.10
ORdigiumasteriskMatch1.6.0.11
ORdigiumasteriskMatch1.6.0.11rc1
ORdigiumasteriskMatch1.6.0.11rc2
ORdigiumasteriskMatch1.6.0.14
ORdigiumasteriskMatch1.6.0.14rc1
ORdigiumasteriskMatch1.6.0.15
ORdigiumasteriskMatch1.6.0.16
ORdigiumasteriskMatch1.6.0.16rc1
ORdigiumasteriskMatch1.6.0.16rc2
ORdigiumasteriskMatch1.6.0.18
ORdigiumasteriskMatch1.6.1.0
ORdigiumasteriskMatch1.6.1.0rc2
ORdigiumasteriskMatch1.6.1.0rc3
ORdigiumasteriskMatch1.6.1.0rc4
ORdigiumasteriskMatch1.6.1.0rc5
ORdigiumasteriskMatch1.6.1.1
ORdigiumasteriskMatch1.6.1.2
ORdigiumasteriskMatch1.6.1.3rc1
ORdigiumasteriskMatch1.6.1.4
ORdigiumasteriskMatch1.6.1.5
ORdigiumasteriskMatch1.6.1.5rc1
ORdigiumasteriskMatch1.6.1.6
ORdigiumasteriskMatch1.6.1.7rc1
ORdigiumasteriskMatch1.6.1.7rc2
ORdigiumasteriskMatch1.6.1.8
ORdigiumasteriskMatch1.6.1.10
ORdigiumasteriskMatch1.6.1.10rc1
ORdigiumasteriskMatch1.6.1.10rc2
ORdigiumasteriskMatch1.6.1.10rc3
Node
digiums800iMatch1.3.0
ORdigiums800iMatch1.3.0.2
ORdigiums800iMatch1.3.0.3
ORdigiums800iMatch1.3.0.4
Node
digiumasteriskMatchb-business
ORdigiumasteriskMatchb.1.3.2-business
ORdigiumasteriskMatchb.1.3.3-business
ORdigiumasteriskMatchb.2.2.0-business
ORdigiumasteriskMatchb.2.2.1-business
ORdigiumasteriskMatchb.2.3.1-business
ORdigiumasteriskMatchb.2.3.2-business
ORdigiumasteriskMatchb.2.3.3-business
ORdigiumasteriskMatchb.2.3.4-business
ORdigiumasteriskMatchb.2.3.5-business
ORdigiumasteriskMatchb.2.3.6-business
ORdigiumasteriskMatchb.2.5.0-business
ORdigiumasteriskMatchb.2.5.1-business
ORdigiumasteriskMatchb.2.5.2-business
ORdigiumasteriskMatchb.2.5.3-business
ORdigiumasteriskMatchc-business
ORdigiumasteriskMatchc.2.3-business
ORdigiumasteriskMatchc.3.0-business
References
downloads.asterisk.org/pub/security/AST-2009-010-1.2.diff.txt
downloads.asterisk.org/pub/security/AST-2009-010-1.4.diff.txt
downloads.asterisk.org/pub/security/AST-2009-010-1.6.0.diff.txt
downloads.asterisk.org/pub/security/AST-2009-010-1.6.1.diff.txt
downloads.digium.com/pub/security/AST-2009-010.html
secunia.com/advisories/37530
secunia.com/advisories/37677
secunia.com/advisories/37708
securitytracker.com/id?1023249
www.debian.org/security/2009/dsa-1952
www.osvdb.org/60569
www.redhat.com/archives/fedora-package-announce/2009-December/msg00759.html
www.securityfocus.com/archive/1/508147/100/0/threaded
www.securityfocus.com/bid/37153
www.vupen.com/english/advisories/2009/3368
exchange.xforce.ibmcloud.com/vulnerabilities/54471
issues.asterisk.org/view.php?id=16242
Related
openvas
openvas
Fedora Core 12 FEDORA-2009-12517 (asterisk)
2009-12-30 00:00:00
Asterisk RTP Comfort Noise Processing Remote Denial of Service Vulnerability (AST-2009-010)
2009-12-01 00:00:00
Fedora Core 12 FEDORA-2009-12517 (asterisk)
2009-12-30 00:00:00
fedora
fedora
[SECURITY] Fedora 12 Update: asterisk-1.6.1.11-1.fc12
2009-12-22 04:56:57
[SECURITY] Fedora 12 Update: asterisk-1.6.1.17-1.fc12
2010-04-01 01:38:49
[SECURITY] Fedora 11 Update: asterisk-1.6.1.11-1.fc11
2009-12-22 04:45:24
ubuntucve
ubuntucve
CVE-2009-4055
2009-12-02 00:00:00
cve
cve
CVE-2009-4055
2009-12-02 11:30:00
nessus
nessus
Fedora 10 : asterisk-1.6.0.19-1.fc10 (2009-12461)
2009-12-14 00:00:00
Fedora 11 : asterisk-1.6.1.11-1.fc11 (2009-12506)
2009-12-22 00:00:00
Fedora 12 : asterisk-1.6.1.11-1.fc12 (2009-12517)
2009-12-22 00:00:00
prion
prion
Code injection
2009-12-02 11:30:00
cvelist
cvelist
CVE-2009-4055
2009-12-02 11:00:00
debiancve
debiancve
CVE-2009-4055
2009-12-02 11:30:00
securityvulns
securityvulns
AST-2009-010: RTP Remote Crash Vulnerability
2009-12-01 00:00:00
Asterisk RTP DoS
2009-12-01 00:00:00
gentoo
gentoo
Asterisk: Multiple vulnerabilities
2010-06-04 00:00:00
osv
osv
asterisk - several vulnerabilities
2009-12-15 00:00:00
debian
debian
[SECURITY] [DSA 1952-1] New asterisk packages fix several vulnerabilities
2009-12-15 13:06:23
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
6.3 Medium
AI Score
Confidence
Low
0.126 Low
EPSS
Percentile
95.5%
Related for NVD:CVE-2009-4055