CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-2686

main/http.c in the HTTP server in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x before 10.12.2, and 11.x before 11.2.2; Certified Asterisk 1.8.15 before 1.8.15-cert2; and Asterisk Digiumphones 10.x-digiumphones before 10.12.2-digiumphones does not properly restrict Content-Length values, which allows remote attackers to conduct stack-consumption attacks and cause a denial of service (daemon crash) via a crafted HTTP POST request. NOTE: this vulnerability exists because of an incorrect fix for CVE-2012-5976.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.024

EPSS Ranking 84.6%

CVSS Severity

CVSS v2 Score 5.0

References

Products affected by CVE-2013-2686

Asterisk » Certified Asterisk » Version: 1.8.15

cpe:2.3:a:asterisk:certified_asterisk:1.8.15
Asterisk » Certified Asterisk » Version: 1.8.15.0

cpe:2.3:a:asterisk:certified_asterisk:1.8.15.0
Asterisk » Digiumphones » Version: 10.0.0

cpe:2.3:a:asterisk:digiumphones:10.0.0
Asterisk » Digiumphones » Version: 10.1.0

cpe:2.3:a:asterisk:digiumphones:10.1.0
Asterisk » Digiumphones » Version: 10.10.0

cpe:2.3:a:asterisk:digiumphones:10.10.0
Asterisk » Digiumphones » Version: 10.11.0

cpe:2.3:a:asterisk:digiumphones:10.11.0
Asterisk » Digiumphones » Version: 10.12.0

cpe:2.3:a:asterisk:digiumphones:10.12.0
Asterisk » Digiumphones » Version: 10.12.1

cpe:2.3:a:asterisk:digiumphones:10.12.1
Asterisk » Digiumphones » Version: 10.2.0

cpe:2.3:a:asterisk:digiumphones:10.2.0
Asterisk » Digiumphones » Version: 10.3.0

cpe:2.3:a:asterisk:digiumphones:10.3.0
Asterisk » Digiumphones » Version: 10.4.0

cpe:2.3:a:asterisk:digiumphones:10.4.0
Asterisk » Digiumphones » Version: 10.5.0

cpe:2.3:a:asterisk:digiumphones:10.5.0
Asterisk » Digiumphones » Version: 10.6.0

cpe:2.3:a:asterisk:digiumphones:10.6.0
Asterisk » Digiumphones » Version: 10.7.0

cpe:2.3:a:asterisk:digiumphones:10.7.0
Asterisk » Digiumphones » Version: 10.8.0

cpe:2.3:a:asterisk:digiumphones:10.8.0
Asterisk » Digiumphones » Version: 10.9.0

cpe:2.3:a:asterisk:digiumphones:10.9.0
Asterisk » Open Source » Version: 1.8.0

cpe:2.3:a:asterisk:open_source:1.8.0
Asterisk » Open Source » Version: 1.8.1

cpe:2.3:a:asterisk:open_source:1.8.1
Asterisk » Open Source » Version: 1.8.1.1

cpe:2.3:a:asterisk:open_source:1.8.1.1
Asterisk » Open Source » Version: 1.8.1.2

cpe:2.3:a:asterisk:open_source:1.8.1.2
Asterisk » Open Source » Version: 1.8.10.0

cpe:2.3:a:asterisk:open_source:1.8.10.0
Asterisk » Open Source » Version: 1.8.10.1

cpe:2.3:a:asterisk:open_source:1.8.10.1
Asterisk » Open Source » Version: 1.8.11.0

cpe:2.3:a:asterisk:open_source:1.8.11.0
Asterisk » Open Source » Version: 1.8.11.1

cpe:2.3:a:asterisk:open_source:1.8.11.1
Asterisk » Open Source » Version: 1.8.12

cpe:2.3:a:asterisk:open_source:1.8.12
Asterisk » Open Source » Version: 1.8.12.0

cpe:2.3:a:asterisk:open_source:1.8.12.0
Asterisk » Open Source » Version: 1.8.12.1

cpe:2.3:a:asterisk:open_source:1.8.12.1
Asterisk » Open Source » Version: 1.8.12.2

cpe:2.3:a:asterisk:open_source:1.8.12.2
Asterisk » Open Source » Version: 1.8.13.0

cpe:2.3:a:asterisk:open_source:1.8.13.0
Asterisk » Open Source » Version: 1.8.13.1

cpe:2.3:a:asterisk:open_source:1.8.13.1
Asterisk » Open Source » Version: 1.8.14.0

cpe:2.3:a:asterisk:open_source:1.8.14.0
Asterisk » Open Source » Version: 1.8.14.1

cpe:2.3:a:asterisk:open_source:1.8.14.1
Asterisk » Open Source » Version: 1.8.15.0

cpe:2.3:a:asterisk:open_source:1.8.15.0
Asterisk » Open Source » Version: 1.8.15.1

cpe:2.3:a:asterisk:open_source:1.8.15.1
Asterisk » Open Source » Version: 1.8.16.0

cpe:2.3:a:asterisk:open_source:1.8.16.0
Asterisk » Open Source » Version: 1.8.17.0

cpe:2.3:a:asterisk:open_source:1.8.17.0
Asterisk » Open Source » Version: 1.8.18.0

cpe:2.3:a:asterisk:open_source:1.8.18.0
Asterisk » Open Source » Version: 1.8.18.1

cpe:2.3:a:asterisk:open_source:1.8.18.1
Asterisk » Open Source » Version: 1.8.19.0

cpe:2.3:a:asterisk:open_source:1.8.19.0
Asterisk » Open Source » Version: 1.8.19.1

cpe:2.3:a:asterisk:open_source:1.8.19.1
Asterisk » Open Source » Version: 1.8.2

cpe:2.3:a:asterisk:open_source:1.8.2
Asterisk » Open Source » Version: 1.8.2.1

cpe:2.3:a:asterisk:open_source:1.8.2.1
Asterisk » Open Source » Version: 1.8.2.2

cpe:2.3:a:asterisk:open_source:1.8.2.2
Asterisk » Open Source » Version: 1.8.2.3

cpe:2.3:a:asterisk:open_source:1.8.2.3
Asterisk » Open Source » Version: 1.8.2.4

cpe:2.3:a:asterisk:open_source:1.8.2.4
Asterisk » Open Source » Version: 1.8.20.0

cpe:2.3:a:asterisk:open_source:1.8.20.0
Asterisk » Open Source » Version: 1.8.20.1

cpe:2.3:a:asterisk:open_source:1.8.20.1
Asterisk » Open Source » Version: 1.8.3

cpe:2.3:a:asterisk:open_source:1.8.3
Asterisk » Open Source » Version: 1.8.3.1

cpe:2.3:a:asterisk:open_source:1.8.3.1
Asterisk » Open Source » Version: 1.8.3.2

cpe:2.3:a:asterisk:open_source:1.8.3.2
Asterisk » Open Source » Version: 1.8.3.3

cpe:2.3:a:asterisk:open_source:1.8.3.3
Asterisk » Open Source » Version: 1.8.4

cpe:2.3:a:asterisk:open_source:1.8.4
Asterisk » Open Source » Version: 1.8.4.1

cpe:2.3:a:asterisk:open_source:1.8.4.1
Asterisk » Open Source » Version: 1.8.4.2

cpe:2.3:a:asterisk:open_source:1.8.4.2
Asterisk » Open Source » Version: 1.8.4.3

cpe:2.3:a:asterisk:open_source:1.8.4.3
Asterisk » Open Source » Version: 1.8.4.4

cpe:2.3:a:asterisk:open_source:1.8.4.4
Asterisk » Open Source » Version: 1.8.5

cpe:2.3:a:asterisk:open_source:1.8.5
Asterisk » Open Source » Version: 1.8.5.0

cpe:2.3:a:asterisk:open_source:1.8.5.0
Asterisk » Open Source » Version: 1.8.6.0

cpe:2.3:a:asterisk:open_source:1.8.6.0
Asterisk » Open Source » Version: 1.8.7.0

cpe:2.3:a:asterisk:open_source:1.8.7.0
Asterisk » Open Source » Version: 1.8.7.1

cpe:2.3:a:asterisk:open_source:1.8.7.1
Asterisk » Open Source » Version: 1.8.7.2

cpe:2.3:a:asterisk:open_source:1.8.7.2
Asterisk » Open Source » Version: 1.8.8.0

cpe:2.3:a:asterisk:open_source:1.8.8.0
Asterisk » Open Source » Version: 1.8.8.1

cpe:2.3:a:asterisk:open_source:1.8.8.1
Asterisk » Open Source » Version: 1.8.8.2

cpe:2.3:a:asterisk:open_source:1.8.8.2
Asterisk » Open Source » Version: 1.8.9.0

cpe:2.3:a:asterisk:open_source:1.8.9.0
Asterisk » Open Source » Version: 1.8.9.1

cpe:2.3:a:asterisk:open_source:1.8.9.1
Asterisk » Open Source » Version: 1.8.9.2

cpe:2.3:a:asterisk:open_source:1.8.9.2
Asterisk » Open Source » Version: 1.8.9.3

cpe:2.3:a:asterisk:open_source:1.8.9.3
Asterisk » Open Source » Version: 10.0.0

cpe:2.3:a:asterisk:open_source:10.0.0
Asterisk » Open Source » Version: 10.0.1

cpe:2.3:a:asterisk:open_source:10.0.1
Asterisk » Open Source » Version: 10.1.0

cpe:2.3:a:asterisk:open_source:10.1.0
Asterisk » Open Source » Version: 10.1.1

cpe:2.3:a:asterisk:open_source:10.1.1
Asterisk » Open Source » Version: 10.1.2

cpe:2.3:a:asterisk:open_source:10.1.2
Asterisk » Open Source » Version: 10.1.3

cpe:2.3:a:asterisk:open_source:10.1.3
Asterisk » Open Source » Version: 10.10.0

cpe:2.3:a:asterisk:open_source:10.10.0
Asterisk » Open Source » Version: 10.10.1

cpe:2.3:a:asterisk:open_source:10.10.1
Asterisk » Open Source » Version: 10.11.0

cpe:2.3:a:asterisk:open_source:10.11.0
Asterisk » Open Source » Version: 10.11.1

cpe:2.3:a:asterisk:open_source:10.11.1
Asterisk » Open Source » Version: 10.12.0

cpe:2.3:a:asterisk:open_source:10.12.0
Asterisk » Open Source » Version: 10.12.1

cpe:2.3:a:asterisk:open_source:10.12.1
Asterisk » Open Source » Version: 10.2.0

cpe:2.3:a:asterisk:open_source:10.2.0
Asterisk » Open Source » Version: 10.2.1

cpe:2.3:a:asterisk:open_source:10.2.1
Asterisk » Open Source » Version: 10.3.0

cpe:2.3:a:asterisk:open_source:10.3.0
Asterisk » Open Source » Version: 10.3.1

cpe:2.3:a:asterisk:open_source:10.3.1
Asterisk » Open Source » Version: 10.4.0

cpe:2.3:a:asterisk:open_source:10.4.0
Asterisk » Open Source » Version: 10.4.1

cpe:2.3:a:asterisk:open_source:10.4.1
Asterisk » Open Source » Version: 10.4.2

cpe:2.3:a:asterisk:open_source:10.4.2
Asterisk » Open Source » Version: 10.5.0

cpe:2.3:a:asterisk:open_source:10.5.0
Asterisk » Open Source » Version: 10.5.1

cpe:2.3:a:asterisk:open_source:10.5.1
Asterisk » Open Source » Version: 10.5.2

cpe:2.3:a:asterisk:open_source:10.5.2
Asterisk » Open Source » Version: 10.6.0

cpe:2.3:a:asterisk:open_source:10.6.0
Asterisk » Open Source » Version: 10.6.1

cpe:2.3:a:asterisk:open_source:10.6.1
Asterisk » Open Source » Version: 10.7.0

cpe:2.3:a:asterisk:open_source:10.7.0
Asterisk » Open Source » Version: 10.7.1

cpe:2.3:a:asterisk:open_source:10.7.1
Asterisk » Open Source » Version: 10.8.0

cpe:2.3:a:asterisk:open_source:10.8.0
Asterisk » Open Source » Version: 10.9.0

cpe:2.3:a:asterisk:open_source:10.9.0
Asterisk » Open Source » Version: 11.0.0

cpe:2.3:a:asterisk:open_source:11.0.0
Asterisk » Open Source » Version: 11.0.1

cpe:2.3:a:asterisk:open_source:11.0.1
Asterisk » Open Source » Version: 11.0.2

cpe:2.3:a:asterisk:open_source:11.0.2
Asterisk » Open Source » Version: 11.1.0

cpe:2.3:a:asterisk:open_source:11.1.0
Asterisk » Open Source » Version: 11.1.1

cpe:2.3:a:asterisk:open_source:11.1.1
Asterisk » Open Source » Version: 11.1.2

cpe:2.3:a:asterisk:open_source:11.1.2
Asterisk » Open Source » Version: 11.2.0

cpe:2.3:a:asterisk:open_source:11.2.0
Asterisk » Open Source » Version: 11.2.1

cpe:2.3:a:asterisk:open_source:11.2.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-2686

Products

Pricing

Contact Us