CVE-2007-1561
HIGH 7.8EPSS 14.9%
The channel driver in Asterisk before 1.2.17 and 1.4.x before 1.4.2 allows remote attackers to cause a denial of service (crash) via a SIP INVITE message with an SDP containing one valid and one invalid IP address.
- CVSS v2.0 NVD
- 7.8 HIGH
AV:N/AC:L/Au:N/C:N/I:N/A:C - EPSS
- 14.93% chance of exploitation in the next 30 days, 97th percentile
- Published
- 2007-03-21
- Updated
- 2024-08-07