CVEvulnerability

CVE-2007-1594

7.8 HIGH Published 2007-03-22 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2007-03-22
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:N/A:C

Description

The handle_response function in chan_sip.c in Asterisk before 1.2.17 and 1.4.x before 1.4.2 allows remote attackers to cause a denial of service (crash) via a SIP Response code 0 in a SIP packet.

Affected configurations

• asterisk asterisk 0.1.7 • asterisk asterisk 0.1.8 • asterisk asterisk 0.1.9 • asterisk asterisk 0.1.9 1 • asterisk asterisk 0.1.11 • asterisk asterisk 0.2 • asterisk asterisk 0.3 • asterisk asterisk 0.4 • asterisk asterisk 0.7.0 • asterisk asterisk 0.7.1 • asterisk asterisk 0.7.2 • asterisk asterisk 0.9.0 • asterisk asterisk 1.0 • asterisk asterisk 1.0.6 • asterisk asterisk 1.0.7 • asterisk asterisk 1.0.8 • asterisk asterisk 1.0.9 • asterisk asterisk 1.0.10 • asterisk asterisk 1.0.11 • asterisk asterisk 1.0.12 • asterisk asterisk 1.2.0 beta1 • asterisk asterisk 1.2.0 beta2 • asterisk asterisk 1.2.5 • asterisk asterisk 1.2.6 • asterisk asterisk 1.2.7 • asterisk asterisk 1.2.8 • asterisk asterisk 1.2.9 • asterisk asterisk 1.2.10 • asterisk asterisk 1.2.11 • asterisk asterisk 1.2.12 • asterisk asterisk 1.2.13 • asterisk asterisk 1.2.14 • asterisk asterisk 1.2.15 • asterisk asterisk 1.2.16 • asterisk asterisk 1.2.17 • asterisk asterisk 1.4.1 • asterisk asterisk 1.4 beta

References

http://bugs.digium.com/view.php?id=9313 Vendor Advisory
http://secunia.com/advisories/24579 Patch, Vendor Advisory
http://secunia.com/advisories/24719 secunia.com
http://secunia.com/advisories/25582 secunia.com
http://security.gentoo.org/glsa/glsa-200704-01.xml security.gentoo.org
http://svn.digium.com/view/asterisk/trunk/channels/chan_sip.c?r1=58907&r2=59038 svn.digium.com
http://voipsa.org/pipermail/voipsec_voipsa.org/2007-March/002275.html Vendor Advisory
http://www.asterisk.org/node/48338 www.asterisk.org
http://www.novell.com/linux/security/advisories/2007_34_asterisk.html www.novell.com
http://www.securityfocus.com/archive/1/463434/100/0/threaded www.securityfocus.com
http://www.securityfocus.com/bid/23093 www.securityfocus.com
http://www.securitytracker.com/id?1017809 www.securitytracker.com
http://www.sineapps.com/news.php?rssid=1707 Vendor Advisory
http://www.vupen.com/english/advisories/2007/1077 www.vupen.com
http://bugs.digium.com/view.php?id=9313 Vendor Advisory
http://secunia.com/advisories/24579 Patch, Vendor Advisory
http://secunia.com/advisories/24719 secunia.com
http://secunia.com/advisories/25582 secunia.com
http://security.gentoo.org/glsa/glsa-200704-01.xml security.gentoo.org
http://svn.digium.com/view/asterisk/trunk/channels/chan_sip.c?r1=58907&r2=59038 svn.digium.com
http://voipsa.org/pipermail/voipsec_voipsa.org/2007-March/002275.html Vendor Advisory
http://www.asterisk.org/node/48338 www.asterisk.org
http://www.novell.com/linux/security/advisories/2007_34_asterisk.html www.novell.com
http://www.securityfocus.com/archive/1/463434/100/0/threaded www.securityfocus.com
http://www.securityfocus.com/bid/23093 www.securityfocus.com
http://www.securitytracker.com/id?1017809 www.securitytracker.com
http://www.sineapps.com/news.php?rssid=1707 Vendor Advisory
http://www.vupen.com/english/advisories/2007/1077 www.vupen.com