Heap overflow

2012-04-3020:55:00

PRIOn knowledge base

www.prio-n.com

7.9 High

AI Score

Confidence

High

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.955 High

EPSS

Percentile

99.4%

JSON

Heap-based buffer overflow in chan_skinny.c in the Skinny channel driver in Asterisk Open Source 1.6.2.x before 1.6.2.24, 1.8.x before 1.8.11.1, and 10.x before 10.3.1 allows remote authenticated users to cause a denial of service or possibly have unspecified other impact via a series of KEYPAD_BUTTON_MESSAGE events.

CPENameOperatorVersion
open_sourceeq1.6.2.0 rc4
open_sourceeq1.6.2.15.1
open_sourceeq1.6.2.10 rc1
open_sourceeq1.6.2.9 rc3
open_sourceeq1.6.2.17 rc1
open_sourceeq1.6.2.1
open_sourceeq1.6.2.2
open_sourceeq1.6.2.14
open_sourceeq1.6.2.17 rc3
open_sourceeq1.6.2.22

Name	Operator	Version
open_source	eq	1.6.2.0 rc4
open_source	eq	1.6.2.15.1
open_source	eq	1.6.2.10 rc1
open_source	eq	1.6.2.9 rc3
open_source	eq	1.6.2.17 rc1
open_source	eq	1.6.2.1
open_source	eq	1.6.2.2
open_source	eq	1.6.2.14
open_source	eq	1.6.2.17 rc3
open_source	eq	1.6.2.22