CVE-2009-2726

Published Aug 12, 2009

Last updated 9 months ago

Overview

Description: The SIP channel driver in Asterisk Open Source 1.2.x before 1.2.34, 1.4.x before 1.4.26.1, 1.6.0.x before 1.6.0.12, and 1.6.1.x before 1.6.1.4; Asterisk Business Edition A.x.x, B.x.x before B.2.5.9, C.2.x before C.2.4.1, and C.3.x before C.3.1; and Asterisk Appliance s800i 1.2.x before 1.3.0.3 does not use a maximum width when invoking sscanf style functions, which allows remote attackers to cause a denial of service (stack memory consumption) via SIP packets containing large sequences of ASCII decimal characters, as demonstrated via vectors related to (1) the CSeq value in a SIP header, (2) large Content-Length value, and (3) SDP.
Source: cve@mitre.org
NVD status: Analyzed

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 7.8
Impact score: 6.9
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:N/I:N/A:C

Weaknesses

nvd@nist.gov: CWE-770

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:digium:asterisk:*:*:business:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C7DBF0A2-9606-43EF-88E6-905B4864D377",
            "versionEndExcluding": "b.2.5.9"
          },
          {
            "criteria": "cpe:2.3:a:digium:asterisk:*:*:business:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "945FA0F6-42A8-4AF4-9EF6-4B16D08B2724",
            "versionEndIncluding": "c.2.4.1",
            "versionStartIncluding": "c.2.0"
          },
          {
            "criteria": "cpe:2.3:a:digium:asterisk:*:*:business:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7375080A-38B8-4230-875B-FC6184F23792",
            "versionEndExcluding": "c.3.1",
            "versionStartIncluding": "c.3.0"
          }
        ],
        "operator": "OR"
      }
    ]
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:digium:s800i_firmware:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "3E7FEE3E-B19C-4E7E-92D6-D0032A5DAA59",
            "versionEndExcluding": "1.3.0.3",
            "versionStartIncluding": "1.2.0"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:digium:s800i:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "15C35F93-0E57-4AEB-AA5F-4EDFAE753451"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "86564062-C367-4652-820A-7B4700011463",
            "versionEndExcluding": "1.2.34",
            "versionStartIncluding": "1.2.0"
          },
          {
            "criteria": "cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "2CD3CE8A-7145-4501-A61A-D29F575E8795",
            "versionEndExcluding": "1.4.26.1",
            "versionStartIncluding": "1.4.0"
          },
          {
            "criteria": "cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "9E6BB86F-2FC7-4830-AC2E-4F114D87FE4C",
            "versionEndExcluding": "1.6.0.12",
            "versionStartIncluding": "1.6.0"
          },
          {
            "criteria": "cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A4DBF98F-EF1D-4DC0-93FE-2EC280AAA5EF",
            "versionEndExcluding": "1.6.1.4",
            "versionStartIncluding": "1.6.1"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References