CVE-2012-3863

channels/chan_sip.c in Asterisk Open Source 1.8.x before 1.8.13.1 and 10.x before 10.5.2, Asterisk Business Edition C.3.x before C.3.7.5, Certified Asterisk…

published July 9, 2012

CVSS
—
EPSS
3%
Percentile
88.0
In the wild
Unconfirmed
What it is

channels/chan_sip.c in Asterisk Open Source 1.8.x before 1.8.13.1 and 10.x before 10.5.2, Asterisk Business Edition C.3.x before C.3.7.5, Certified Asterisk 1.8.11-certx before 1.8.11-cert4, and Asterisk Digiumphones 10.x.x-digiumphones before 10.5.2-digiumphones does not properly handle a provisional response to a SIP reINVITE request, which allows remote authenticated users to cause a denial of service (RTP port exhaustion) via sessions that lack final responses.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03197 · 88.0th percentile
Published
2012-07-09T10:00Z
EPSS history
Timeline
  • 09 JUL 10:00Z
    channels/chan_sip.c in Asterisk Open Source 1.8.x before 1.8.13.1 and 10.x before 10.5.2, Asterisk Business Edition C.3.x before C.3.7.5, Certified Asterisk…
    cvelistv5