Lucene search
Ubuntu.comUB:CVE-2013-2685HistoryApr 01, 2013 - 12:00 a.m.
CVE-2013-2685
2013-04-0100:00:00
ubuntu.com
ubuntu.com
7
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.433 Medium
EPSS
Percentile
97.3%
Stack-based buffer overflow in res/res_format_attr_h264.c in Asterisk Open
Source 11.x before 11.2.2 allows remote attackers to execute arbitrary code
via a long sprop-parameter-sets H.264 media attribute in a SIP Session
Description Protocol (SDP) header.
Related
checkpoint_advisories
checkpoint_advisories
Digium Asterisk SIP SDP Header Parsing Stack Buffer Overflow (CVE-2013-2685)
2013-06-30 00:00:00
openvas
openvas
Fedora Update for asterisk FEDORA-2013-4566
2013-04-08 00:00:00
Fedora Update for asterisk FEDORA-2013-4566
2013-04-08 00:00:00
Gentoo Security Advisory GLSA 201401-15
2015-09-29 00:00:00
fedora
fedora
[SECURITY] Fedora 18 Update: asterisk-11.2.2-1.fc18
2013-04-07 00:28:33
cve
cve
CVE-2013-2685
2013-04-01 16:55:00
prion
prion
Stack overflow
2013-04-01 16:55:00
securityvulns
securityvulns
AST-2013-001: Buffer Overflow Exploit Through SIP SDP Header
2013-04-01 00:00:00
Asterisk multiple security vulnerabilities
2013-04-01 00:00:00
nessus
nessus
Fedora 18 : asterisk-11.2.2-1.fc18 (2013-4566)
2013-04-08 00:00:00
Asterisk SIP SDP Buffer Overflow (AST-2013-001)
2013-04-10 00:00:00
debiancve
debiancve
CVE-2013-2685
2013-04-01 16:55:00
freebsd
freebsd
asterisk -- multiple vulnerabilities
2013-03-27 00:00:00
gentoo
gentoo
Asterisk: Multiple vulnerabilities
2014-01-21 00:00:00
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.433 Medium
EPSS
Percentile
97.3%
Related for UB:CVE-2013-2685