CVE-2012-2415 Heap-based buffer overflow in chan_skinny.c in the Skinny channel driver in Asterisk Open Source 1.6.2.x before 1.6.2.24, 1.8.x before 1.8.11.1, and 10.x before 10.3.1 allows remote authenticated user...
MediumCVSS 6.5
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in chan_skinny.c in the Skinny channel driver in Asterisk Open Source 1.6.2.x before 1.6.2.24, 1.8.x before 1.8.11.1, and 10.x before 10.3.1 allows remote authenticated users to cause a denial of service or possibly have unspecified other impact via a series of KEYPAD_BUTTON_MESSAGE events.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/asterisk(Debian:14) | < 1:1.8.11.1~dfsg-1 | 1:1.8.11.1~dfsg-1 |
| debian/asterisk(Debian:14) | = 0.1.11-3 | No fix listed |
| debian/asterisk(Debian:14) | = 0.1.11-3woody1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.5-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.5-4 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.6-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.6-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.7-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.7.dfsg.1-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.7.dfsg.1-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.7.dfsg.1-2sarge1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.7.dfsg.1-2sarge2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.7.dfsg.1-2sarge3 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.7.dfsg.1-2sarge4 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.7.dfsg.1-2sarge5 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.7.dfsg.1-2sarge6 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.9.dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.9.dfsg-3 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.9.dfsg-4 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.9.dfsg-5 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.9.dfsg-6 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.0-beta1.dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.0-beta2.dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.0-beta2.dfsg-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.0-beta2.dfsg-3 | No fix listed |
Show 175 more
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/asterisk(Debian:14) | = 1:1.2.0-rc1.dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.0-rc2.dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.0.dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.0.dfsg-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.0.dfsg-3 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.0.dfsg-4 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.0.dfsg-5 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.0.dfsg-6 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.1.dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.1.dfsg-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.1.dfsg-3 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.10.dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.10.dfsg-1bpo1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.10.dfsg-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.10.dfsg-3 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.11.dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.12.1.dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.13~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.13~dfsg-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.13~dfsg-2etch1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.13~dfsg-2etch2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.13~dfsg-2etch3 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.13~dfsg-2etch4 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.14~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.14~dfsg-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.14~dfsg-3 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.14~dfsg-4 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.15~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.16~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.17~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.4.dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.4.dfsg-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.4.dfsg-3 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.4.dfsg-4 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.4.dfsg-5 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.4.dfsg-6 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.4.dfsg-6+b1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.4.dfsg-7 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.7.1.dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.7.1.dfsg-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.7.1.dfsg-3 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.9.1.dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.10~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.11~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.11~dfsg-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.11~dfsg-3 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.11~dfsg-4 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.13~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.15~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.16.2~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.16.2~dfsg-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.17~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.17~dfsg-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.18.1~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.18~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.19.1~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.20~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.21.1~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.21.2~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.21.2~dfsg-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.21.2~dfsg-3 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.21.2~dfsg-3+lenny1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.21.2~dfsg-3+lenny2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.21.2~dfsg-3+lenny2.1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.21.2~dfsg-3+lenny3 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.21.2~dfsg-3+lenny5 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.21.2~dfsg-3+lenny6 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.21.2~dfsg-3.1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.2~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.2~dfsg-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.2~dfsg-3 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.2~dfsg-4 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.2~dfsg-5 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.3~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.4~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.4~dfsg-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.4~dfsg-3 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.5~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.6~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.8~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.8~dfsg-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.9~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.6.1.0~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.6.1.0~dfsg~rc3-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.6.2.0-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.6.2.0~dfsg~beta3-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.6.2.0~dfsg~rc1-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.6.2.0~rc3-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.6.2.0~rc3-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.6.2.0~rc6-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.6.2.0~rc7-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.6.2.2-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.6.2.6-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.6.2.7-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.6.2.9-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.6.2.9-1~bpo50+1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.6.2.9-1~bpo50+2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.6.2.9-1~bpo50+3 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.6.2.9-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.6.2.9-2+squeeze1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.6.2.9-2+squeeze10 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.6.2.9-2+squeeze11 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.6.2.9-2+squeeze12 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.6.2.9-2+squeeze2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.6.2.9-2+squeeze3 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.6.2.9-2+squeeze4 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.6.2.9-2+squeeze5 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.6.2.9-2+squeeze6 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.6.2.9-2+squeeze7 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.6.2.9-2+squeeze8 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.6.2.9-2+squeeze9 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.8.10.0~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.8.10.1~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.8.3.3-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.8.4-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.8.4.2-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.8.4.3-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.8.4.4~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.8.4.4~dfsg-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.8.7.1~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.8.7.1~dfsg-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.8.7.1~dfsg-3 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.8.8.0~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.8.8.2~dfsg-1 | No fix listed |
| asterisk open source | = 1.6.2.0 | No fix listed |
| asterisk open source | = 1.6.2.0-rc2 | No fix listed |
| asterisk open source | = 1.6.2.0-rc3 | No fix listed |
| asterisk open source | = 1.6.2.0-rc4 | No fix listed |
| asterisk open source | = 1.6.2.0-rc5 | No fix listed |
| asterisk open source | = 1.6.2.0-rc6 | No fix listed |
| asterisk open source | = 1.6.2.0-rc7 | No fix listed |
| asterisk open source | = 1.6.2.0-rc8 | No fix listed |
| asterisk open source | = 1.6.2.1 | No fix listed |
| asterisk open source | = 1.6.2.1-rc1 | No fix listed |
| asterisk open source | = 1.6.2.2 | No fix listed |
| asterisk open source | = 1.6.2.3-rc2 | No fix listed |
| asterisk open source | = 1.6.2.4 | No fix listed |
| asterisk open source | = 1.6.2.5 | No fix listed |
| asterisk open source | = 1.6.2.6 | No fix listed |
| asterisk open source | = 1.6.2.6-rc1 | No fix listed |
| asterisk open source | = 1.6.2.6-rc2 | No fix listed |
| asterisk open source | = 1.6.2.7 | No fix listed |
| asterisk open source | = 1.6.2.7-rc1 | No fix listed |
| asterisk open source | = 1.6.2.7-rc2 | No fix listed |
| asterisk open source | = 1.6.2.7-rc3 | No fix listed |
| asterisk open source | = 1.6.2.8 | No fix listed |
| asterisk open source | = 1.6.2.8-rc1 | No fix listed |
| asterisk open source | = 1.6.2.9 | No fix listed |
| asterisk open source | = 1.6.2.9-rc1 | No fix listed |
| asterisk open source | = 1.6.2.9-rc2 | No fix listed |
| asterisk open source | = 1.6.2.9-rc3 | No fix listed |
| asterisk open source | = 1.6.2.10 | No fix listed |
| asterisk open source | = 1.6.2.10-rc1 | No fix listed |
| asterisk open source | = 1.6.2.10-rc2 | No fix listed |
| asterisk open source | = 1.6.2.11 | No fix listed |
| asterisk open source | = 1.6.2.11-rc1 | No fix listed |
| asterisk open source | = 1.6.2.11-rc2 | No fix listed |
| asterisk open source | = 1.6.2.12 | No fix listed |
| asterisk open source | = 1.6.2.12-rc1 | No fix listed |
| asterisk open source | = 1.6.2.13 | No fix listed |
| asterisk open source | = 1.6.2.14 | No fix listed |
| asterisk open source | = 1.6.2.14-rc1 | No fix listed |
| asterisk open source | = 1.6.2.15 | No fix listed |
| asterisk open source | = 1.6.2.15-rc1 | No fix listed |
| asterisk open source | = 1.6.2.15.1 | No fix listed |
| asterisk open source | = 1.6.2.16 | No fix listed |
| asterisk open source | = 1.6.2.16-rc1 | No fix listed |
| asterisk open source | = 1.6.2.16.1 | No fix listed |
| asterisk open source | = 1.6.2.16.2 | No fix listed |
| asterisk open source | = 1.6.2.17 | No fix listed |
| asterisk open source | = 1.6.2.17-rc1 | No fix listed |
| asterisk open source | = 1.6.2.17-rc2 | No fix listed |
| asterisk open source | = 1.6.2.17-rc3 | No fix listed |
| asterisk open source | = 1.6.2.17.1 | No fix listed |
| asterisk open source | = 1.6.2.17.2 | No fix listed |
References
- Debian Security Tracker CVE-2012-2415 vendor-advisory
- downloads.asterisk.org patch vendor-advisory
- FEDORA-2012-6724 vendor-advisory
- 81455 vdb-entry
- 48891 third-party-advisory
- 48941 third-party-advisory
- DSA-2460 vendor-advisory
- 53210 vdb-entry
- 1026962 vdb-entry
- asterisk-skinny-driver-bo(75102) vdb-entry
- bugs.debian.org issue-tracking