Asterisk : Security Vulnerabilities, CVEs, Published In 2007 (Overflow)
Stack-based buffer overflow in the IAX2 channel driver (chan_iax2) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote attackers to execute arbitrary code by sending a long (1) voice or (2) video RTP frame.
Max CVSS
9.3
EPSS Score
18.54%
Published
2007-07-18
Updated
2017-07-29
Buffer overflow in sethdlc.c in the Asterisk Zaptel 1.4.5.1 might allow local users to gain privileges via a long device name (interface name) in the ifr_name field. NOTE: the vendor disputes this issue, stating that the application requires root access, so privilege boundaries are not crossed
Max CVSS
4.6
EPSS Score
0.06%
Published
2007-10-29
Updated
2024-03-21
2 vulnerabilities found