Vulnerability Details CVE-2006-5445
Unspecified vulnerability in the SIP channel driver (channels/chan_sip.c) in Asterisk 1.2.x before 1.2.13 and 1.4.x before 1.4.0-beta3 allows remote attackers to cause a denial of service (resource consumption) via unspecified vectors that result in the creation of "a real pvt structure" that uses more resources than necessary.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.076
EPSS Ranking 91.4%
CVSS Severity
CVSS v2 Score 7.8
References
- http://ftp.digium.com/pub/asterisk/releases/ChangeLog-1.2.13
- http://secunia.com/advisories/22651
- http://secunia.com/advisories/22979
- http://www.asterisk.org/node/109
- http://www.asterisk.org/node/110
- http://www.gentoo.org/security/en/glsa/glsa-200610-15.xml
- http://www.novell.com/linux/security/advisories/2006_69_asterisk.html
- http://www.osvdb.org/29973
- http://www.securityfocus.com/archive/1/449183/100/0/threaded
- http://www.securityfocus.com/bid/20835
- http://www.vupen.com/english/advisories/2006/4098
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29664
- http://ftp.digium.com/pub/asterisk/releases/ChangeLog-1.2.13
- http://secunia.com/advisories/22651
- http://secunia.com/advisories/22979
- http://www.asterisk.org/node/109
- http://www.asterisk.org/node/110
- http://www.gentoo.org/security/en/glsa/glsa-200610-15.xml
- http://www.novell.com/linux/security/advisories/2006_69_asterisk.html
- http://www.osvdb.org/29973
- http://www.securityfocus.com/archive/1/449183/100/0/threaded
- http://www.securityfocus.com/bid/20835
- http://www.vupen.com/english/advisories/2006/4098
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29664
Products affected by CVE-2006-5445
-
cpe:2.3:a:digium:asterisk:1.2.0_beta1
-
cpe:2.3:a:digium:asterisk:1.2.0_beta2
-
cpe:2.3:a:digium:asterisk:1.2.10
-
cpe:2.3:a:digium:asterisk:1.2.11
-
cpe:2.3:a:digium:asterisk:1.2.12
-
cpe:2.3:a:digium:asterisk:1.2.12.1
-
cpe:2.3:a:digium:asterisk:1.2.6
-
cpe:2.3:a:digium:asterisk:1.2.7
-
cpe:2.3:a:digium:asterisk:1.2.8
-
cpe:2.3:a:digium:asterisk:1.2.9
-
cpe:2.3:a:digium:asterisk:1.4.0
-
cpe:2.3:a:digium:asterisk:1.4.0_beta1
-
cpe:2.3:a:digium:asterisk:1.4.0_beta2