CVE-2012-1184

Stack-based buffer overflow in the ast_parse_digest function in main/utils.c in Asterisk 1.8.x before 1.8.10.1 and 10.x before 10.2.1 allows remote attackers…

published September 18, 2012

CVSS
—
EPSS
16%
Percentile
97.0
In the wild
Unconfirmed
What it is

Stack-based buffer overflow in the ast_parse_digest function in main/utils.c in Asterisk 1.8.x before 1.8.10.1 and 10.x before 10.2.1 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string in an HTTP Digest Authentication header.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.16391 · 97.0th percentile
Published
2012-09-18T18:00Z
EPSS history
Timeline
  • 18 SEP 18:00Z
    Stack-based buffer overflow in the ast_parse_digest function in main/utils.c in Asterisk 1.8.x before 1.8.10.1 and 10.x before 10.2.1 allows remote attackers…
    cvelistv5