Evil-DB LogoEvil-DB
← All CVEs

CVE-2007-1306

high · 7.8

Asterisk 1.4 before 1.4.1 and 1.2 before 1.2.16 allows remote attackers to cause a denial of service (crash) by sending a Session Initiation Protocol (SIP) packet without a URI and SIP-version header, which results in a NULL pointer dereference.

7.8
CVSS
20.3%
EPSS (exploit prob.)
97th
EPSS percentile
2007-03-07
Published

AV:N/AC:L/Au:N/C:N/I:N/A:C

Affected products

VendorProductAffected versions
digiumasterisk1.2.0_beta1
digiumasterisk1.2.0_beta2
digiumasterisk1.2.6
digiumasterisk1.2.7
digiumasterisk1.2.8
digiumasterisk1.2.9
digiumasterisk1.2.10
digiumasterisk1.2.11
digiumasterisk1.2.12
digiumasterisk1.2.12.1
digiumasterisk1.2.13
digiumasterisk1.2.14
digiumasterisk1.2.15
digiumasterisk1.2_beta1
digiumasterisk1.2_beta2
digiumasterisk1.4.0
digiumasterisk1.4.0_beta1
digiumasterisk1.4.0_beta2

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2007-1306