CVE-2007-1306
HIGH 7.8EPSS 20.9%
Asterisk 1.4 before 1.4.1 and 1.2 before 1.2.16 allows remote attackers to cause a denial of service (crash) by sending a Session Initiation Protocol (SIP) packet without a URI and SIP-version header, which results in a NULL pointer dereference.
- CVSS v2.0 NVD
- 7.8 HIGH
AV:N/AC:L/Au:N/C:N/I:N/A:C - EPSS
- 20.88% chance of exploitation in the next 30 days, 98th percentile
- Published
- 2007-03-07
- Updated
- 2024-08-07
ExploitDB entries (1)
Security advisories
- http://secunia.com/advisories/24578
- http://secunia.com/advisories/25582
- http://www.vupen.com/english/advisories/2007/0830
- http://www.kb.cert.org/vuls/id/228032
- http://www.securityfocus.com/bid/22838