CVE-2012-3812

Double free vulnerability in apps/app_voicemail.c in Asterisk Open Source 1.8.x before 1.8.13.1 and 10.x before 10.5.2, Certified Asterisk 1.8.11-certx before…

published July 9, 2012

CVSS
—
EPSS
3%
Percentile
88.0
In the wild
Unconfirmed
What it is

Double free vulnerability in apps/app_voicemail.c in Asterisk Open Source 1.8.x before 1.8.13.1 and 10.x before 10.5.2, Certified Asterisk 1.8.11-certx before 1.8.11-cert4, and Asterisk Digiumphones 10.x.x-digiumphones before 10.5.2-digiumphones allows remote authenticated users to cause a denial of service (daemon crash) by establishing multiple voicemail sessions and accessing both the Urgent mailbox and the INBOX mailbox.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03197 · 88.0th percentile
Published
2012-07-09T22:00Z
EPSS history
Timeline
  • 09 JUL 22:00Z
    Double free vulnerability in apps/app_voicemail.c in Asterisk Open Source 1.8.x before 1.8.13.1 and 10.x before 10.5.2, Certified Asterisk 1.8.11-certx before…
    cvelistv5