CVE

Id
57106  
CVE No.
CVE-2012-3863  
Status
Candidate  
Description
channels/chan_sip.c in Asterisk Open Source 1.8.x before 1.8.13.1 and 10.x before 10.5.2, Asterisk Business Edition C.3.x before C.3.7.5, Certified Asterisk 1.8.11-certx before 1.8.11-cert4, and Asterisk Digiumphones 10.x.x-digiumphones before 10.5.2-digiumphones does not properly handle a provisional response to a SIP reINVITE request, which allows remote authenticated users to cause a denial of service (RTP port exhaustion) via sessions that lack final responses.  
Phase
Assigned (20120706)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
590379 57106 CVE-2012-3863 CONFIRM:http://downloads.asterisk.org/pub/security/AST-2012-010.html  View
590380 57106 CVE-2012-3863 CONFIRM:https://issues.asterisk.org/jira/browse/ASTERISK-19992  View
590381 57106 CVE-2012-3863 DEBIAN:DSA-2550  View
590382 57106 CVE-2012-3863 URL:http://www.debian.org/security/2012/dsa-2550  View
590383 57106 CVE-2012-3863 BID:54327  View
590384 57106 CVE-2012-3863 URL:http://www.securityfocus.com/bid/54327  View
590385 57106 CVE-2012-3863 SECUNIA:50687  View
590386 57106 CVE-2012-3863 URL:http://secunia.com/advisories/50687  View
590387 57106 CVE-2012-3863 SECUNIA:50756  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
27599 JVNDB-2012-003306 ISC BIND の ns_client データ構造におけるサービス運用妨害 (DoS) の脆弱性 ISC BIND の ns_client データ構造には、競合状態により、サービス運用妨害 (メモリ消費またはプロセス終了) 状態となる脆弱性が存在します。 CVE-2012-3868 57106 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003306.html  View