| Max CVSS | 10.0 | Min CVSS | 5.0 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2007-2297 | 7.8 |
The SIP channel driver (chan_sip) in Asterisk before 1.2.18 and 1.4.x before 1.4.3 does not properly parse SIP UDP packets that do not contain a valid response code, which allows remote attackers to cause a denial of service (crash).
|
16-10-2018 - 16:43 | 26-04-2007 - 20:19 | |
| CVE-2007-2294 | 7.8 |
The Manager Interface in Asterisk before 1.2.18 and 1.4.x before 1.4.3 allows remote attackers to cause a denial of service (crash) by using MD5 authentication to authenticate a user that does not have a password defined in manager.conf, resulting in
|
16-10-2018 - 16:43 | 26-04-2007 - 20:19 | |
| CVE-2007-1561 | 7.8 |
The channel driver in Asterisk before 1.2.17 and 1.4.x before 1.4.2 allows remote attackers to cause a denial of service (crash) via a SIP INVITE message with an SDP containing one valid and one invalid IP address.
|
16-10-2018 - 16:39 | 21-03-2007 - 19:19 | |
| CVE-2007-3764 | 5.0 |
The Skinny channel driver (chan_skinny) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote attackers to cause a denia
|
29-07-2017 - 01:32 | 18-07-2007 - 17:30 | |
| CVE-2007-3762 | 9.3 |
Stack-based buffer overflow in the IAX2 channel driver (chan_iax2) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote
|
29-07-2017 - 01:32 | 18-07-2007 - 17:30 | |
| CVE-2007-2488 | 10.0 |
The IAX2 channel driver (chan_iax2) in Asterisk before 20070504 does not properly null terminate data, which allows remote attackers to trigger loss of transmitted data, and possibly obtain sensitive information (memory contents) or cause a denial of
|
29-07-2017 - 01:31 | 07-05-2007 - 19:19 | |
| CVE-2007-1306 | 7.8 |
Asterisk 1.4 before 1.4.1 and 1.2 before 1.2.16 allows remote attackers to cause a denial of service (crash) by sending a Session Initiation Protocol (SIP) packet without a URI and SIP-version header, which results in a NULL pointer dereference. Per:
|
29-07-2017 - 01:30 | 07-03-2007 - 00:19 | |
| CVE-2007-3763 | 5.0 |
The IAX2 channel driver (chan_iax2) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote attackers to cause a denial of
|
08-03-2011 - 02:57 | 18-07-2007 - 17:30 |