CVE-2007-1594

The handle_response function in chan_sip.c in Asterisk before 1.2.17 and 1.4.x before 1.4.2 allows remote attackers to cause a denial of service (crash) via a SIP Response code 0 in a SIP packet.

Link	Resource
http://voipsa.org/pipermail/voipsec_voipsa.org/2007-March/002275.html	Vendor Advisory
http://bugs.digium.com/view.php?id=9313	Vendor Advisory
http://svn.digium.com/view/asterisk/trunk/channels/chan_sip.c?r1=58907&r2=59038
http://www.sineapps.com/news.php?rssid=1707	Vendor Advisory
http://www.securityfocus.com/bid/23093
http://secunia.com/advisories/24579	Patch Vendor Advisory
http://www.asterisk.org/node/48338
http://www.securitytracker.com/id?1017809
http://security.gentoo.org/glsa/glsa-200704-01.xml
http://secunia.com/advisories/24719
http://www.novell.com/linux/security/advisories/2007_34_asterisk.html
http://secunia.com/advisories/25582
http://www.vupen.com/english/advisories/2007/1077
http://www.securityfocus.com/archive/1/463434/100/0/threaded

Configuration 1

cpe:2.3:a:asterisk:asterisk:0.1.11:*:*:*:*:*:*:* cpe:2.3:a:asterisk:asterisk:0.1.7:*:*:*:*:*:*:* cpe:2.3:a:asterisk:asterisk:1.0.11:*:*:*:*:*:*:* cpe:2.3:a:asterisk:asterisk:1.2.14:*:*:*:*:*:*:* cpe:2.3:a:asterisk:asterisk:1.2.16:*:*:*:*:*:*:* cpe:2.3:a:asterisk:asterisk:0.3:*:*:*:*:*:*:* cpe:2.3:a:asterisk:asterisk:0.7.2:*:*:*:*:*:*:* cpe:2.3:a:asterisk:asterisk:1.2.5:*:*:*:*:*:*:* cpe:2.3:a:asterisk:asterisk:0.1.9_1:*:*:*:*:*:*:* cpe:2.3:a:asterisk:asterisk:0.1.8:*:*:*:*:*:*:* cpe:2.3:a:asterisk:asterisk:1.0.8:*:*:*:*:*:*:* cpe:2.3:a:asterisk:asterisk:1.4_beta:*:*:*:*:*:*:* cpe:2.3:a:asterisk:asterisk:1.2.6:*:*:*:*:*:*:* cpe:2.3:a:asterisk:asterisk:1.2.7:*:*:*:*:*:*:* cpe:2.3:a:asterisk:asterisk:1.2.0_beta1:*:*:*:*:*:*:* cpe:2.3:a:asterisk:asterisk:0.9.0:*:*:*:*:*:*:* cpe:2.3:a:asterisk:asterisk:1.0.12:*:*:*:*:*:*:* cpe:2.3:a:asterisk:asterisk:1.2.8:*:*:*:*:*:*:* cpe:2.3:a:asterisk:asterisk:0.7.1:*:*:*:*:*:*:* cpe:2.3:a:asterisk:asterisk:1.2.15:*:*:*:*:*:*:* cpe:2.3:a:asterisk:asterisk:0.4:*:*:*:*:*:*:* cpe:2.3:a:asterisk:asterisk:1.2.17:*:*:*:*:*:*:* cpe:2.3:a:asterisk:asterisk:1.2.11:*:*:*:*:*:*:* cpe:2.3:a:asterisk:asterisk:1.2.12:*:*:*:*:*:*:* cpe:2.3:a:asterisk:asterisk:1.0.6:*:*:*:*:*:*:* cpe:2.3:a:asterisk:asterisk:0.1.9:*:*:*:*:*:*:* cpe:2.3:a:asterisk:asterisk:1.0.9:*:*:*:*:*:*:* cpe:2.3:a:asterisk:asterisk:1.2.10:*:*:*:*:*:*:* cpe:2.3:a:asterisk:asterisk:1.2.9:*:*:*:*:*:*:* cpe:2.3:a:asterisk:asterisk:1.0.7:*:*:*:*:*:*:* cpe:2.3:a:asterisk:asterisk:1.2.13:*:*:*:*:*:*:* cpe:2.3:a:asterisk:asterisk:1.2.0_beta2:*:*:*:*:*:*:* cpe:2.3:a:asterisk:asterisk:1.0:*:*:*:*:*:*:* cpe:2.3:a:asterisk:asterisk:0.7.0:*:*:*:*:*:*:* cpe:2.3:a:asterisk:asterisk:1.4.1:*:*:*:*:*:*:* cpe:2.3:a:asterisk:asterisk:1.0.10:*:*:*:*:*:*:* cpe:2.3:a:asterisk:asterisk:0.2:*:*:*:*:*:*:*

---

Published : 2007-03-22 11:19

Updated : 2018-10-16 04:39

---

NVD link : CVE-2007-1594

Mitre link : CVE-2007-1594

No products.

NVD-CWE-Other