Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2012-3553

Опубликовано: 19 июн. 2012
Источник: nvd
CVSS2: 4
EPSS Низкий

Описание

chan_skinny.c in the Skinny (aka SCCP) channel driver in Asterisk Open Source 10.x before 10.5.1 allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) by sending a Station Key Pad Button message and closing a connection in off-hook mode, a related issue to CVE-2012-2948.

Комментарий

Per: http://cwe.mitre.org/data/definitions/476.html

'CWE-476: NULL Pointer Dereference'

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:digium:asterisk:10.0.0:*:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:10.0.0:beta1:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:10.0.0:beta2:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:10.0.0:rc1:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:10.0.0:rc2:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:10.0.0:rc3:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:10.0.1:*:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:10.1.0:*:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:10.1.0:rc1:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:10.1.0:rc2:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:10.1.1:*:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:10.1.2:*:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:10.1.3:*:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:10.2.0:*:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:10.2.0:rc1:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:10.2.0:rc2:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:10.2.0:rc3:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:10.2.0:rc4:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:10.2.1:*:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:10.3.0:*:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:10.3.0:rc2:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:10.3.0:rc3:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:10.3.1:*:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:10.4.0:*:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:10.4.0:rc1:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:10.4.0:rc2:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:10.4.0:rc3:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:10.4.1:*:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:10.4.2:*:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:10.5.0:*:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:10.5.0:rc1:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:10.5.0:rc2:*:*:*:*:*:*

EPSS

Процентиль: 21%
0.00069
Низкий

4 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

ubuntu логотип

CVE-2012-3553

ubuntu
больше 13 лет назад

chan_skinny.c in the Skinny (aka SCCP) channel driver in Asterisk Open Source 10.x before 10.5.1 allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) by sending a Station Key Pad Button message and closing a connection in off-hook mode, a related issue to CVE-2012-2948.

debian логотип

CVE-2012-3553

debian
больше 13 лет назад

chan_skinny.c in the Skinny (aka SCCP) channel driver in Asterisk Open ...

github логотип

GHSA-9mqv-jvm5-5mv6

github
больше 3 лет назад

chan_skinny.c in the Skinny (aka SCCP) channel driver in Asterisk Open Source 10.x before 10.5.1 allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) by sending a Station Key Pad Button message and closing a connection in off-hook mode, a related issue to CVE-2012-2948.

EPSS

Процентиль: 21%
0.00069
Низкий

4 Medium

CVSS2

Дефекты

NVD-CWE-Other