CVE-2007-3762 Stack-based buffer overflow in the IAX2 channel driver (chan_iax2) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, AsteriskNOW before beta7, Appliance Developer Kit....
HighCVSS 9.3
EPSS 5.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in the IAX2 channel driver (chan_iax2) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote attackers to execute arbitrary code by sending a long (1) voice or (2) video RTP frame.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| asterisk | = 1.0 | No fix listed |
| asterisk | = 1.0.6 | No fix listed |
| asterisk | = 1.0.7 | No fix listed |
| asterisk | = 1.0.8 | No fix listed |
| asterisk | = 1.0.9 | No fix listed |
| asterisk | = 1.0.10 | No fix listed |
| asterisk | = 1.0.11 | No fix listed |
| asterisk | = 1.0.12 | No fix listed |
| asterisk | = 1.2.0_beta1 | No fix listed |
| asterisk | = 1.2.0_beta2 | No fix listed |
| asterisk | = 1.2.5 | No fix listed |
| asterisk | = 1.2.6 | No fix listed |
| asterisk | = 1.2.7 | No fix listed |
| asterisk | = 1.2.8 | No fix listed |
| asterisk | = 1.2.9 | No fix listed |
| asterisk | = 1.2.10 | No fix listed |
| asterisk | = 1.2.11 | No fix listed |
| asterisk | = 1.2.12 | No fix listed |
| asterisk | = 1.2.13 | No fix listed |
| asterisk | = 1.2.14 | No fix listed |
| asterisk | = 1.2.15 | No fix listed |
| asterisk | = 1.2.16 | No fix listed |
| asterisk | = 1.2.17 | No fix listed |
| asterisk | = 1.4.1 | No fix listed |
| asterisk | = 1.4.2 | No fix listed |
Show 89 more
| Product | Affected versions | Fixed in |
|---|---|---|
| asterisk | = 1.4.4_2007-04-27 | No fix listed |
| asterisk | = 1.4_beta | No fix listed |
| asterisk | = a | No fix listed |
| asterisk | = b.1.3.2 | No fix listed |
| asterisk | = b.1.3.3 | No fix listed |
| asterisk | = b.2.2.0 | No fix listed |
| asterisk appliance developer kit | <= 0.4 | No fix listed |
| asterisknow | = beta_5 | No fix listed |
| asterisknow | = beta_6 | No fix listed |
| asterisk s800i appliance | = 1.0 | No fix listed |
| asterisk s800i appliance | = 1.0.1 | No fix listed |
| debian/asterisk(Debian:14) | < 1:1.4.8~dfsg-1 | 1:1.4.8~dfsg-1 |
| debian/asterisk(Debian:14) | = 0.1.11-3 | No fix listed |
| debian/asterisk(Debian:14) | = 0.1.11-3woody1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.5-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.5-4 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.6-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.6-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.7-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.7.dfsg.1-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.7.dfsg.1-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.7.dfsg.1-2sarge1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.7.dfsg.1-2sarge2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.7.dfsg.1-2sarge3 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.7.dfsg.1-2sarge4 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.7.dfsg.1-2sarge5 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.7.dfsg.1-2sarge6 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.9.dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.9.dfsg-3 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.9.dfsg-4 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.9.dfsg-5 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.9.dfsg-6 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.0-beta1.dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.0-beta2.dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.0-beta2.dfsg-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.0-beta2.dfsg-3 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.0-rc1.dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.0-rc2.dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.0.dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.0.dfsg-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.0.dfsg-3 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.0.dfsg-4 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.0.dfsg-5 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.0.dfsg-6 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.1.dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.1.dfsg-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.1.dfsg-3 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.10.dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.10.dfsg-1bpo1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.10.dfsg-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.10.dfsg-3 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.11.dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.12.1.dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.13~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.13~dfsg-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.13~dfsg-2etch1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.13~dfsg-2etch2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.13~dfsg-2etch3 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.13~dfsg-2etch4 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.14~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.14~dfsg-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.14~dfsg-3 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.14~dfsg-4 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.15~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.16~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.17~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.4.dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.4.dfsg-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.4.dfsg-3 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.4.dfsg-4 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.4.dfsg-5 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.4.dfsg-6 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.4.dfsg-6+b1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.4.dfsg-7 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.7.1.dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.7.1.dfsg-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.7.1.dfsg-3 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.9.1.dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.2~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.2~dfsg-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.2~dfsg-3 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.2~dfsg-4 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.2~dfsg-5 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.3~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.4~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.4~dfsg-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.4~dfsg-3 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.5~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.6~dfsg-1 | No fix listed |
References
- bugs.gentoo.org
- ftp.digium.com patch
- 26099 third-party-advisory
- 29051 third-party-advisory
- GLSA-200802-11 vendor-advisory
- DSA-1358 vendor-advisory
- SUSE-SR:2007:015 vendor-advisory
- 24949 vdb-entry
- 1018407 vdb-entry
- ADV-2007-2563 vdb-entry
- asterisk-iax2channeldriver-bo(35466) vdb-entry
- Debian Security Tracker CVE-2007-3762 vendor-advisory