CVE-2010-0441

Asterisk Open Source 1.6.0.x before 1.6.0.22, 1.6.1.x before 1.6.1.14, and 1.6.2.x before 1.6.2.2, and Business Edition C.3 before C.3.3.2, allows remote…

published February 4, 2010

CVSS
—
EPSS
3%
Percentile
88.6
In the wild
Unconfirmed
What it is

Asterisk Open Source 1.6.0.x before 1.6.0.22, 1.6.1.x before 1.6.1.14, and 1.6.2.x before 1.6.2.2, and Business Edition C.3 before C.3.3.2, allows remote attackers to cause a denial of service (daemon crash) via an SIP T.38 negotiation with an SDP FaxMaxDatagram field that is (1) missing, (2) modified to contain a negative number, or (3) modified to contain a large number.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03377 · 88.6th percentile
Published
2010-02-04T18:00Z
EPSS history
Timeline
  • 04 FEB 18:00Z
    Asterisk Open Source 1.6.0.x before 1.6.0.22, 1.6.1.x before 1.6.1.14, and 1.6.2.x before 1.6.2.2, and Business Edition C.3 before C.3.3.2, allows remote…
    cvelistv5