Lucene search

K
nvd[email protected]NVD:CVE-2012-3553
HistoryJun 19, 2012 - 8:55 p.m.

CVE-2012-3553

2012-06-1920:55:07
web.nvd.nist.gov

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

6 Medium

AI Score

Confidence

Low

0.96 High

EPSS

Percentile

99.5%

chan_skinny.c in the Skinny (aka SCCP) channel driver in Asterisk Open Source 10.x before 10.5.1 allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) by sending a Station Key Pad Button message and closing a connection in off-hook mode, a related issue to CVE-2012-2948.

Affected configurations

NVD
Node
digiumasteriskMatch10.0.0
OR
digiumasteriskMatch10.0.0beta1
OR
digiumasteriskMatch10.0.0beta2
OR
digiumasteriskMatch10.0.0rc1
OR
digiumasteriskMatch10.0.0rc2
OR
digiumasteriskMatch10.0.0rc3
OR
digiumasteriskMatch10.0.1
OR
digiumasteriskMatch10.1.0
OR
digiumasteriskMatch10.1.0rc1
OR
digiumasteriskMatch10.1.0rc2
OR
digiumasteriskMatch10.1.1
OR
digiumasteriskMatch10.1.2
OR
digiumasteriskMatch10.1.3
OR
digiumasteriskMatch10.2.0
OR
digiumasteriskMatch10.2.0rc1
OR
digiumasteriskMatch10.2.0rc2
OR
digiumasteriskMatch10.2.0rc3
OR
digiumasteriskMatch10.2.0rc4
OR
digiumasteriskMatch10.2.1
OR
digiumasteriskMatch10.3.0
OR
digiumasteriskMatch10.3.0rc2
OR
digiumasteriskMatch10.3.0rc3
OR
digiumasteriskMatch10.3.1
OR
digiumasteriskMatch10.4.0
OR
digiumasteriskMatch10.4.0rc1
OR
digiumasteriskMatch10.4.0rc2
OR
digiumasteriskMatch10.4.0rc3
OR
digiumasteriskMatch10.4.1
OR
digiumasteriskMatch10.4.2
OR
digiumasteriskMatch10.5.0
OR
digiumasteriskMatch10.5.0rc1
OR
digiumasteriskMatch10.5.0rc2

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

6 Medium

AI Score

Confidence

Low

0.96 High

EPSS

Percentile

99.5%