CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2009-2726

The SIP channel driver in Asterisk Open Source 1.2.x before 1.2.34, 1.4.x before 1.4.26.1, 1.6.0.x before 1.6.0.12, and 1.6.1.x before 1.6.1.4; Asterisk Business Edition A.x.x, B.x.x before B.2.5.9, C.2.x before C.2.4.1, and C.3.x before C.3.1; and Asterisk Appliance s800i 1.2.x before 1.3.0.3 does not use a maximum width when invoking sscanf style functions, which allows remote attackers to cause a denial of service (stack memory consumption) via SIP packets containing large sequences of ASCII decimal characters, as demonstrated via vectors related to (1) the CSeq value in a SIP header, (2) large Content-Length value, and (3) SDP.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.1

EPSS Ranking 92.6%

CVSS Severity

CVSS v2 Score 7.8

References

Products affected by CVE-2009-2726

Digium » Asterisk » Version: 1.2.0

cpe:2.3:a:digium:asterisk:1.2.0
Digium » Asterisk » Version: 1.2.1

cpe:2.3:a:digium:asterisk:1.2.1
Digium » Asterisk » Version: 1.2.10

cpe:2.3:a:digium:asterisk:1.2.10
Digium » Asterisk » Version: 1.2.11

cpe:2.3:a:digium:asterisk:1.2.11
Digium » Asterisk » Version: 1.2.12

cpe:2.3:a:digium:asterisk:1.2.12
Digium » Asterisk » Version: 1.2.12.1

cpe:2.3:a:digium:asterisk:1.2.12.1
Digium » Asterisk » Version: 1.2.13

cpe:2.3:a:digium:asterisk:1.2.13
Digium » Asterisk » Version: 1.2.14

cpe:2.3:a:digium:asterisk:1.2.14
Digium » Asterisk » Version: 1.2.15

cpe:2.3:a:digium:asterisk:1.2.15
Digium » Asterisk » Version: 1.2.16

cpe:2.3:a:digium:asterisk:1.2.16
Digium » Asterisk » Version: 1.2.17

cpe:2.3:a:digium:asterisk:1.2.17
Digium » Asterisk » Version: 1.2.18

cpe:2.3:a:digium:asterisk:1.2.18
Digium » Asterisk » Version: 1.2.19

cpe:2.3:a:digium:asterisk:1.2.19
Digium » Asterisk » Version: 1.2.2

cpe:2.3:a:digium:asterisk:1.2.2
Digium » Asterisk » Version: 1.2.20

cpe:2.3:a:digium:asterisk:1.2.20
Digium » Asterisk » Version: 1.2.21

cpe:2.3:a:digium:asterisk:1.2.21
Digium » Asterisk » Version: 1.2.21.1

cpe:2.3:a:digium:asterisk:1.2.21.1
Digium » Asterisk » Version: 1.2.22

cpe:2.3:a:digium:asterisk:1.2.22
Digium » Asterisk » Version: 1.2.23

cpe:2.3:a:digium:asterisk:1.2.23
Digium » Asterisk » Version: 1.2.24

cpe:2.3:a:digium:asterisk:1.2.24
Digium » Asterisk » Version: 1.2.25

cpe:2.3:a:digium:asterisk:1.2.25
Digium » Asterisk » Version: 1.2.26

cpe:2.3:a:digium:asterisk:1.2.26
Digium » Asterisk » Version: 1.2.26.1

cpe:2.3:a:digium:asterisk:1.2.26.1
Digium » Asterisk » Version: 1.2.26.2

cpe:2.3:a:digium:asterisk:1.2.26.2
Digium » Asterisk » Version: 1.2.27

cpe:2.3:a:digium:asterisk:1.2.27
Digium » Asterisk » Version: 1.2.28

cpe:2.3:a:digium:asterisk:1.2.28
Digium » Asterisk » Version: 1.2.28.1

cpe:2.3:a:digium:asterisk:1.2.28.1
Digium » Asterisk » Version: 1.2.29

cpe:2.3:a:digium:asterisk:1.2.29
Digium » Asterisk » Version: 1.2.3

cpe:2.3:a:digium:asterisk:1.2.3
Digium » Asterisk » Version: 1.2.30

cpe:2.3:a:digium:asterisk:1.2.30
Digium » Asterisk » Version: 1.2.30.1

cpe:2.3:a:digium:asterisk:1.2.30.1
Digium » Asterisk » Version: 1.2.30.2

cpe:2.3:a:digium:asterisk:1.2.30.2
Digium » Asterisk » Version: 1.2.30.3

cpe:2.3:a:digium:asterisk:1.2.30.3
Digium » Asterisk » Version: 1.2.30.4

cpe:2.3:a:digium:asterisk:1.2.30.4
Digium » Asterisk » Version: 1.2.31

cpe:2.3:a:digium:asterisk:1.2.31
Digium » Asterisk » Version: 1.2.31.1

cpe:2.3:a:digium:asterisk:1.2.31.1
Digium » Asterisk » Version: 1.2.31.2

cpe:2.3:a:digium:asterisk:1.2.31.2
Digium » Asterisk » Version: 1.2.32

cpe:2.3:a:digium:asterisk:1.2.32
Digium » Asterisk » Version: 1.2.33

cpe:2.3:a:digium:asterisk:1.2.33
Digium » Asterisk » Version: 1.2.4

cpe:2.3:a:digium:asterisk:1.2.4
Digium » Asterisk » Version: 1.2.5

cpe:2.3:a:digium:asterisk:1.2.5
Digium » Asterisk » Version: 1.2.6

cpe:2.3:a:digium:asterisk:1.2.6
Digium » Asterisk » Version: 1.2.7

cpe:2.3:a:digium:asterisk:1.2.7
Digium » Asterisk » Version: 1.2.7.1

cpe:2.3:a:digium:asterisk:1.2.7.1
Digium » Asterisk » Version: 1.2.8

cpe:2.3:a:digium:asterisk:1.2.8
Digium » Asterisk » Version: 1.2.9

cpe:2.3:a:digium:asterisk:1.2.9
Digium » Asterisk » Version: 1.2.9.1

cpe:2.3:a:digium:asterisk:1.2.9.1
Digium » Asterisk » Version: 1.4.0

cpe:2.3:a:digium:asterisk:1.4.0
Digium » Asterisk » Version: 1.4.1

cpe:2.3:a:digium:asterisk:1.4.1
Digium » Asterisk » Version: 1.4.10

cpe:2.3:a:digium:asterisk:1.4.10
Digium » Asterisk » Version: 1.4.10.1

cpe:2.3:a:digium:asterisk:1.4.10.1
Digium » Asterisk » Version: 1.4.11

cpe:2.3:a:digium:asterisk:1.4.11
Digium » Asterisk » Version: 1.4.12

cpe:2.3:a:digium:asterisk:1.4.12
Digium » Asterisk » Version: 1.4.12.1

cpe:2.3:a:digium:asterisk:1.4.12.1
Digium » Asterisk » Version: 1.4.13

cpe:2.3:a:digium:asterisk:1.4.13
Digium » Asterisk » Version: 1.4.14

cpe:2.3:a:digium:asterisk:1.4.14
Digium » Asterisk » Version: 1.4.15

cpe:2.3:a:digium:asterisk:1.4.15
Digium » Asterisk » Version: 1.4.16

cpe:2.3:a:digium:asterisk:1.4.16
Digium » Asterisk » Version: 1.4.16.1

cpe:2.3:a:digium:asterisk:1.4.16.1
Digium » Asterisk » Version: 1.4.16.2

cpe:2.3:a:digium:asterisk:1.4.16.2
Digium » Asterisk » Version: 1.4.17

cpe:2.3:a:digium:asterisk:1.4.17
Digium » Asterisk » Version: 1.4.18

cpe:2.3:a:digium:asterisk:1.4.18
Digium » Asterisk » Version: 1.4.18.1

cpe:2.3:a:digium:asterisk:1.4.18.1
Digium » Asterisk » Version: 1.4.19

cpe:2.3:a:digium:asterisk:1.4.19
Digium » Asterisk » Version: 1.4.19.1

cpe:2.3:a:digium:asterisk:1.4.19.1
Digium » Asterisk » Version: 1.4.19.2

cpe:2.3:a:digium:asterisk:1.4.19.2
Digium » Asterisk » Version: 1.4.2

cpe:2.3:a:digium:asterisk:1.4.2
Digium » Asterisk » Version: 1.4.20

cpe:2.3:a:digium:asterisk:1.4.20
Digium » Asterisk » Version: 1.4.20.1

cpe:2.3:a:digium:asterisk:1.4.20.1
Digium » Asterisk » Version: 1.4.21

cpe:2.3:a:digium:asterisk:1.4.21
Digium » Asterisk » Version: 1.4.21.1

cpe:2.3:a:digium:asterisk:1.4.21.1
Digium » Asterisk » Version: 1.4.21.2

cpe:2.3:a:digium:asterisk:1.4.21.2
Digium » Asterisk » Version: 1.4.22

cpe:2.3:a:digium:asterisk:1.4.22
Digium » Asterisk » Version: 1.4.22.1

cpe:2.3:a:digium:asterisk:1.4.22.1
Digium » Asterisk » Version: 1.4.22.2

cpe:2.3:a:digium:asterisk:1.4.22.2
Digium » Asterisk » Version: 1.4.23

cpe:2.3:a:digium:asterisk:1.4.23
Digium » Asterisk » Version: 1.4.23.1

cpe:2.3:a:digium:asterisk:1.4.23.1
Digium » Asterisk » Version: 1.4.23.2

cpe:2.3:a:digium:asterisk:1.4.23.2
Digium » Asterisk » Version: 1.4.24

cpe:2.3:a:digium:asterisk:1.4.24
Digium » Asterisk » Version: 1.4.24.1

cpe:2.3:a:digium:asterisk:1.4.24.1
Digium » Asterisk » Version: 1.4.25

cpe:2.3:a:digium:asterisk:1.4.25
Digium » Asterisk » Version: 1.4.25.1

cpe:2.3:a:digium:asterisk:1.4.25.1
Digium » Asterisk » Version: 1.4.26

cpe:2.3:a:digium:asterisk:1.4.26
Digium » Asterisk » Version: 1.4.3

cpe:2.3:a:digium:asterisk:1.4.3
Digium » Asterisk » Version: 1.4.4

cpe:2.3:a:digium:asterisk:1.4.4
Digium » Asterisk » Version: 1.4.5

cpe:2.3:a:digium:asterisk:1.4.5
Digium » Asterisk » Version: 1.4.6

cpe:2.3:a:digium:asterisk:1.4.6
Digium » Asterisk » Version: 1.4.7

cpe:2.3:a:digium:asterisk:1.4.7
Digium » Asterisk » Version: 1.4.7.1

cpe:2.3:a:digium:asterisk:1.4.7.1
Digium » Asterisk » Version: 1.4.8

cpe:2.3:a:digium:asterisk:1.4.8
Digium » Asterisk » Version: 1.4.9

cpe:2.3:a:digium:asterisk:1.4.9
Digium » Asterisk » Version: 1.6.0

cpe:2.3:a:digium:asterisk:1.6.0
Digium » Asterisk » Version: 1.6.0.1

cpe:2.3:a:digium:asterisk:1.6.0.1
Digium » Asterisk » Version: 1.6.0.10

cpe:2.3:a:digium:asterisk:1.6.0.10
Digium » Asterisk » Version: 1.6.0.11

cpe:2.3:a:digium:asterisk:1.6.0.11
Digium » Asterisk » Version: 1.6.0.2

cpe:2.3:a:digium:asterisk:1.6.0.2
Digium » Asterisk » Version: 1.6.0.3

cpe:2.3:a:digium:asterisk:1.6.0.3
Digium » Asterisk » Version: 1.6.0.3.1

cpe:2.3:a:digium:asterisk:1.6.0.3.1
Digium » Asterisk » Version: 1.6.0.4

cpe:2.3:a:digium:asterisk:1.6.0.4
Digium » Asterisk » Version: 1.6.0.5

cpe:2.3:a:digium:asterisk:1.6.0.5
Digium » Asterisk » Version: 1.6.0.6

cpe:2.3:a:digium:asterisk:1.6.0.6
Digium » Asterisk » Version: 1.6.0.7

cpe:2.3:a:digium:asterisk:1.6.0.7
Digium » Asterisk » Version: 1.6.0.8

cpe:2.3:a:digium:asterisk:1.6.0.8
Digium » Asterisk » Version: 1.6.0.9

cpe:2.3:a:digium:asterisk:1.6.0.9
Digium » Asterisk » Version: 1.6.1

cpe:2.3:a:digium:asterisk:1.6.1
Digium » Asterisk » Version: 1.6.1.0

cpe:2.3:a:digium:asterisk:1.6.1.0
Digium » Asterisk » Version: 1.6.1.1

cpe:2.3:a:digium:asterisk:1.6.1.1
Digium » Asterisk » Version: 1.6.1.2

cpe:2.3:a:digium:asterisk:1.6.1.2
Digium » Asterisk » Version: 1.6.1.3

cpe:2.3:a:digium:asterisk:1.6.1.3
Digium » Asterisk » Version: a

cpe:2.3:a:digium:asterisk:a
Digium » Asterisk » Version: b

cpe:2.3:a:digium:asterisk:b
Digium » Asterisk » Version: b.1.3.2

cpe:2.3:a:digium:asterisk:b.1.3.2
Digium » Asterisk » Version: b.1.3.3

cpe:2.3:a:digium:asterisk:b.1.3.3
Digium » Asterisk » Version: b.2.2.0

cpe:2.3:a:digium:asterisk:b.2.2.0
Digium » Asterisk » Version: b.2.2.1

cpe:2.3:a:digium:asterisk:b.2.2.1
Digium » Asterisk » Version: b.2.3.1

cpe:2.3:a:digium:asterisk:b.2.3.1
Digium » Asterisk » Version: b.2.3.2

cpe:2.3:a:digium:asterisk:b.2.3.2
Digium » Asterisk » Version: b.2.3.3

cpe:2.3:a:digium:asterisk:b.2.3.3
Digium » Asterisk » Version: b.2.3.4

cpe:2.3:a:digium:asterisk:b.2.3.4
Digium » Asterisk » Version: b.2.3.5

cpe:2.3:a:digium:asterisk:b.2.3.5
Digium » Asterisk » Version: b.2.3.6

cpe:2.3:a:digium:asterisk:b.2.3.6
Digium » Asterisk » Version: b.2.5.0

cpe:2.3:a:digium:asterisk:b.2.5.0
Digium » Asterisk » Version: b.2.5.1

cpe:2.3:a:digium:asterisk:b.2.5.1
Digium » Asterisk » Version: b.2.5.2

cpe:2.3:a:digium:asterisk:b.2.5.2
Digium » Asterisk » Version: b.2.5.3

cpe:2.3:a:digium:asterisk:b.2.5.3
Digium » Asterisk » Version: c.2.3

cpe:2.3:a:digium:asterisk:c.2.3
Digium » Asterisk » Version: c.3.0

cpe:2.3:a:digium:asterisk:c.3.0
Digium » S800i » Version: N/A

cpe:2.3:h:digium:s800i:-
Digium » S800i Firmware » Version: 1.2.0

cpe:2.3:o:digium:s800i_firmware:1.2.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2009-2726

Products

Pricing

Contact Us