NVD

Id
46977  
Name
CVE-2012-5977  
Description
Asterisk Open Source 1.8.x before 1.8.19.1, 10.x before 10.11.1, and 11.x before 11.1.2; Certified Asterisk 1.8.11 before 1.8.11-cert10; and Asterisk Digiumphones 10.x-digiumphones before 10.11.1-digiumphones, when anonymous calls are enabled, allow remote attackers to cause a denial of service (resource consumption) by making anonymous calls from multiple sources and consequently adding many entries to the device state cache.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2013-01-04  
Modified Date
2013-02-02  
Seq
2012-5977  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
235283 46977 CVE-2012-5977 http://downloads.asterisk.org/pub/security/AST-2012-015  View
235284 46977 CVE-2012-5977 DSA-2605  View
235285 46977 CVE-2012-5977 https://issues.asterisk.org/jira/browse/ASTERISK-20175  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
19434 JVNDB-2013-001008 複数の Asterisk 製品におけるサービス運用妨害 (リソース消費) の脆弱性 複数の Asterisk 製品には、anonymous call が有効な場合、サービス運用妨害 (リソース消費) 状態となる脆弱性が存在します。 CVE-2012-5977 59215 CVE-2012-5977 46977 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001008.html 2013-01-02 2013-01-07 View