Lucene search

[email protected]NVD:CVE-2012-3863

HistoryJul 09, 2012 - 10:20 a.m.

CVE-2012-3863

2012-07-0910:20:44

CWE-399

[email protected]

web.nvd.nist.gov

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

6 Medium

AI Score

Confidence

High

0.01 Low

EPSS

Percentile

84.0%

JSON

channels/chan_sip.c in Asterisk Open Source 1.8.x before 1.8.13.1 and 10.x before 10.5.2, Asterisk Business Edition C.3.x before C.3.7.5, Certified Asterisk 1.8.11-certx before 1.8.11-cert4, and Asterisk Digiumphones 10.x.x-digiumphones before 10.5.2-digiumphones does not properly handle a provisional response to a SIP reINVITE request, which allows remote authenticated users to cause a denial of service (RTP port exhaustion) via sessions that lack final responses.

Affected configurations

NVD

Node

digiumasterisk_business_editionMatchc.3.1

digiumasterisk_business_editionMatchc.3.3

digiumasterisk_business_editionMatchc.3.7.4

Node

digiumasteriskMatch1.8.0

digiumasteriskMatch1.8.0beta1

digiumasteriskMatch1.8.0beta2

digiumasteriskMatch1.8.0beta3

digiumasteriskMatch1.8.0beta4

digiumasteriskMatch1.8.0beta5

digiumasteriskMatch1.8.0rc2

digiumasteriskMatch1.8.0rc3

digiumasteriskMatch1.8.0rc4

digiumasteriskMatch1.8.0rc5

digiumasteriskMatch1.8.1

digiumasteriskMatch1.8.1rc1

digiumasteriskMatch1.8.1.1

digiumasteriskMatch1.8.1.2

digiumasteriskMatch1.8.2

digiumasteriskMatch1.8.2.1

digiumasteriskMatch1.8.2.2

digiumasteriskMatch1.8.2.3

digiumasteriskMatch1.8.2.4

digiumasteriskMatch1.8.3

digiumasteriskMatch1.8.3rc1

digiumasteriskMatch1.8.3rc2

digiumasteriskMatch1.8.3rc3

digiumasteriskMatch1.8.3.1

digiumasteriskMatch1.8.3.2

digiumasteriskMatch1.8.3.3

digiumasteriskMatch1.8.4

digiumasteriskMatch1.8.4rc1

digiumasteriskMatch1.8.4rc2

digiumasteriskMatch1.8.4rc3

digiumasteriskMatch1.8.4.1

digiumasteriskMatch1.8.4.2

digiumasteriskMatch1.8.4.3

digiumasteriskMatch1.8.4.4

digiumasteriskMatch1.8.5

digiumasteriskMatch1.8.5rc1

digiumasteriskMatch1.8.5.0

digiumasteriskMatch1.8.6.0

digiumasteriskMatch1.8.6.0rc1

digiumasteriskMatch1.8.6.0rc2

digiumasteriskMatch1.8.6.0rc3

digiumasteriskMatch1.8.7.0

digiumasteriskMatch1.8.7.0rc1

digiumasteriskMatch1.8.7.0rc2

digiumasteriskMatch1.8.7.1

digiumasteriskMatch1.8.8.0

digiumasteriskMatch1.8.8.0rc1

digiumasteriskMatch1.8.8.0rc2

digiumasteriskMatch1.8.8.0rc3

digiumasteriskMatch1.8.8.0rc5

digiumasteriskMatch1.8.8.1

digiumasteriskMatch1.8.8.2

digiumasteriskMatch1.8.9.0

digiumasteriskMatch1.8.9.0rc1

digiumasteriskMatch1.8.9.0rc2

digiumasteriskMatch1.8.9.0rc3

digiumasteriskMatch1.8.9.2

digiumasteriskMatch1.8.9.3

digiumasteriskMatch1.8.11.0

digiumasteriskMatch1.8.11.0rc2

digiumasteriskMatch1.8.11.0rc3

digiumasteriskMatch1.8.11.1

digiumasteriskMatch1.8.13.0

digiumasteriskMatch1.8.13.0rc1

digiumasteriskMatch1.8.13.0rc2

digiumasteriskeMatch1.8.8.0rc4

digiumasteriskeMatch1.8.9.1

digiumcertified_asteriskMatch1.8.11cert

digiumcertified_asteriskMatch1.8.11cert1

Node

digiumasteriskMatch10.0.0digiumphones

digiumasteriskMatch10.0.0beta1digiumphones

digiumasteriskMatch10.0.0beta2digiumphones

digiumasteriskMatch10.0.0rc1digiumphones

digiumasteriskMatch10.0.0rc2digiumphones

digiumasteriskMatch10.0.0rc3digiumphones

digiumasteriskMatch10.1.0digiumphones

digiumasteriskMatch10.1.0rc1digiumphones

digiumasteriskMatch10.1.0rc2digiumphones

digiumasteriskMatch10.2.0digiumphones

digiumasteriskMatch10.2.0rc1digiumphones

digiumasteriskMatch10.2.0rc2digiumphones

digiumasteriskMatch10.2.0rc3digiumphones

digiumasteriskMatch10.2.0rc4digiumphones

digiumasteriskMatch10.3.0digiumphones

digiumasteriskMatch10.3.0rc2digiumphones

digiumasteriskMatch10.3.0rc3digiumphones

digiumasteriskMatch10.4.0digiumphones

digiumasteriskMatch10.4.0rc1digiumphones

digiumasteriskMatch10.4.0rc2digiumphones

digiumasteriskMatch10.5.0digiumphones

digiumasteriskMatch10.5.0rc1digiumphones

digiumasteriskMatch10.5.0rc2digiumphones

digiumasteriskMatch10.5.1digiumphones

Node

digiumasteriskMatch10.0.0

digiumasteriskMatch10.0.0beta1

digiumasteriskMatch10.0.0beta2

digiumasteriskMatch10.0.0rc1

digiumasteriskMatch10.0.0rc2

digiumasteriskMatch10.0.0rc3

digiumasteriskMatch10.0.1

digiumasteriskMatch10.1.0

digiumasteriskMatch10.1.0rc1

digiumasteriskMatch10.1.0rc2

digiumasteriskMatch10.1.1

digiumasteriskMatch10.1.2

digiumasteriskMatch10.1.3

digiumasteriskMatch10.2.0

digiumasteriskMatch10.2.0rc1

digiumasteriskMatch10.2.0rc2

digiumasteriskMatch10.2.0rc3

digiumasteriskMatch10.2.0rc4

digiumasteriskMatch10.2.1

digiumasteriskMatch10.3.0

digiumasteriskMatch10.3.0rc2

digiumasteriskMatch10.3.0rc3

digiumasteriskMatch10.3.1

digiumasteriskMatch10.4.0

digiumasteriskMatch10.4.0rc1

digiumasteriskMatch10.4.0rc2

digiumasteriskMatch10.4.0rc3

digiumasteriskMatch10.4.1

digiumasteriskMatch10.4.2

digiumasteriskMatch10.5.0

digiumasteriskMatch10.5.0rc1

digiumasteriskMatch10.5.0rc2

digiumasteriskMatch10.5.1

Node

digiumcertified_asteriskMatch1.8.11cert

digiumcertified_asteriskMatch1.8.11cert1

digiumcertified_asteriskMatch1.8.11cert2

digiumcertified_asteriskMatch1.8.11cert3

References

downloads.asterisk.org/pub/security/AST-2012-010.html

secunia.com/advisories/50687

secunia.com/advisories/50756

www.debian.org/security/2012/dsa-2550

www.securityfocus.com/bid/54327

issues.asterisk.org/jira/browse/ASTERISK-19992

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

6 Medium

AI Score

Confidence

High

0.01 Low

EPSS

Percentile

84.0%

JSON

Related for NVD:CVE-2012-3863

cve1 ubuntucve1 debiancve1 nessus4 prion1 cvelist1 openvas8 fedora1 debian2 gentoo1