medium5.0
CVE-2012-5976
Multiple stack consumption vulnerabilities in Asterisk Open Source 1.8.x before 1.8.19.1, 10.x before 10.11.1, and 11.x before 11.1.2; Certified Asterisk 1.8.1…
Impact
Multiple stack consumption vulnerabilities in Asterisk Open Source 1.8.x before 1.8.19.1, 10.x before 10.11.1, and 11.x before 11.1.2; Certified Asterisk 1.8.11 before 1.8.11-cert10; and Asterisk Digiumphones 10.x-digiumphones before 10.11.1-digiumphones allow remote attackers to cause a denial of service (daemon crash) via TCP data using the (1) SIP, (2) HTTP, or (3) XMPP protocol.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Digium | Asterisk | through 1.8.19.0 Versions 1.8.0, 1.8.1, 1.8.1.1, 1.8.1.2, 1.8.2 |
| Digium | Certified Asterisk | Version 1.8.11 |