CVE Vulnerabilities

CVE-2012-0885

Published: Jan 25, 2012 | Modified: Jan 26, 2012
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu

chan_sip.c in Asterisk Open Source 1.8.x before 1.8.8.2 and 10.x before 10.0.1, when the res_srtp module is used and media support is improperly configured, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted SDP message with a crypto attribute and a (1) video or (2) text media type, as demonstrated by CSipSimple.

Affected Software

Name Vendor Start Version End Version
Open_source Asterisk 1.8.0 1.8.0
Open_source Asterisk 1.8.0 1.8.0
Open_source Asterisk 1.8.0 1.8.0
Open_source Asterisk 1.8.0 1.8.0
Open_source Asterisk 1.8.0 1.8.0
Open_source Asterisk 1.8.0 1.8.0
Open_source Asterisk 1.8.0 1.8.0
Open_source Asterisk 1.8.0 1.8.0
Open_source Asterisk 1.8.0 1.8.0
Open_source Asterisk 1.8.0 1.8.0
Open_source Asterisk 1.8.1 1.8.1
Open_source Asterisk 1.8.1 1.8.1
Open_source Asterisk 1.8.1.1 1.8.1.1
Open_source Asterisk 1.8.1.2 1.8.1.2
Open_source Asterisk 1.8.2 1.8.2
Open_source Asterisk 1.8.2 1.8.2
Open_source Asterisk 1.8.2.1 1.8.2.1
Open_source Asterisk 1.8.2.2 1.8.2.2
Open_source Asterisk 1.8.2.3 1.8.2.3
Open_source Asterisk 1.8.2.4 1.8.2.4
Open_source Asterisk 1.8.3 1.8.3
Open_source Asterisk 1.8.3 1.8.3
Open_source Asterisk 1.8.3 1.8.3
Open_source Asterisk 1.8.3 1.8.3
Open_source Asterisk 1.8.3.1 1.8.3.1
Open_source Asterisk 1.8.3.2 1.8.3.2
Open_source Asterisk 1.8.3.3 1.8.3.3
Open_source Asterisk 1.8.4 1.8.4
Open_source Asterisk 1.8.4 1.8.4
Open_source Asterisk 1.8.4 1.8.4
Open_source Asterisk 1.8.4 1.8.4
Open_source Asterisk 1.8.4.1 1.8.4.1
Open_source Asterisk 1.8.4.2 1.8.4.2
Open_source Asterisk 1.8.4.3 1.8.4.3
Open_source Asterisk 1.8.4.4 1.8.4.4
Open_source Asterisk 1.8.5 1.8.5
Open_source Asterisk 1.8.5.0 1.8.5.0
Open_source Asterisk 1.8.6.0 1.8.6.0
Open_source Asterisk 1.8.6.0 1.8.6.0
Open_source Asterisk 1.8.6.0 1.8.6.0
Open_source Asterisk 1.8.6.0 1.8.6.0
Open_source Asterisk 1.8.7.0 1.8.7.0
Open_source Asterisk 1.8.7.0 1.8.7.0
Open_source Asterisk 1.8.7.0 1.8.7.0
Open_source Asterisk 1.8.7.1 1.8.7.1
Open_source Asterisk 1.8.7.2 1.8.7.2
Open_source Asterisk 1.8.8.0 1.8.8.0
Open_source Asterisk 1.8.8.0 1.8.8.0
Open_source Asterisk 1.8.8.0 1.8.8.0
Open_source Asterisk 1.8.8.0 1.8.8.0
Open_source Asterisk 1.8.8.0 1.8.8.0
Open_source Asterisk 1.8.8.0 1.8.8.0
Open_source Asterisk 1.8.8.1 1.8.8.1
Asterisk Ubuntu oneiric *
Asterisk Ubuntu upstream *

References