CVE

Id
27120  
CVE No.
CVE-2007-3763  
Status
Candidate  
Description
The IAX2 channel driver (chan_iax2) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote attackers to cause a denial of service (crash) via a crafted (1) LAGRQ or (2) LAGRP frame that contains information elements of IAX frames, which results in a NULL pointer dereference when Asterisk does not properly set an associated variable.  
Phase
Assigned (20070713)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
277565 27120 CVE-2007-3763 CONFIRM:http://ftp.digium.com/pub/asa/ASA-2007-015.pdf  View
277566 27120 CVE-2007-3763 CONFIRM:http://bugs.gentoo.org/show_bug.cgi?id=185713  View
277567 27120 CVE-2007-3763 DEBIAN:DSA-1358  View
277568 27120 CVE-2007-3763 URL:http://www.debian.org/security/2007/dsa-1358  View
277569 27120 CVE-2007-3763 GENTOO:GLSA-200802-11  View
277570 27120 CVE-2007-3763 URL:http://security.gentoo.org/glsa/glsa-200802-11.xml  View
277571 27120 CVE-2007-3763 SUSE:SUSE-SR:2007:015  View
277572 27120 CVE-2007-3763 URL:http://www.novell.com/linux/security/advisories/2007_15_sr.html  View
277573 27120 CVE-2007-3763 BID:24950  View
277574 27120 CVE-2007-3763 URL:http://www.securityfocus.com/bid/24950  View
277575 27120 CVE-2007-3763 VUPEN:ADV-2007-2563  View
277576 27120 CVE-2007-3763 URL:http://www.vupen.com/english/advisories/2007/2563  View
277577 27120 CVE-2007-3763 SECTRACK:1018407  View
277578 27120 CVE-2007-3763 URL:http://www.securitytracker.com/id?1018407  View
277579 27120 CVE-2007-3763 SECUNIA:26099  View
277580 27120 CVE-2007-3763 URL:http://secunia.com/advisories/26099  View
277581 27120 CVE-2007-3763 SECUNIA:29051  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53652 JVNDB-2007-002344 Asterisk の STUN 実装におけるサービス運用妨害 (DoS) の脆弱性 Asterisk、AsteriskNOW、Appliance Developer Kit および s800i の STUN 実装には、サービス運用妨害 (クラッシュ) 状態となる脆弱性が存在します。 CVE-2007-3765 27120 5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002344.html  View