Evil-DB LogoEvil-DB
← All CVEs

CVE-2007-3764

medium · 5

The Skinny channel driver (chan_skinny) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote attackers to cause a denial of service (crash) via a certain data length value in a crafted packet, which results in an "overly large memcpy."

5
CVSS
31.5%
EPSS (exploit prob.)
98th
EPSS percentile
2007-07-18
Published

AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

VendorProductAffected versions
asteriskasterisk1.0
asteriskasterisk1.0.6
asteriskasterisk1.0.7
asteriskasterisk1.0.8
asteriskasterisk1.0.9
asteriskasterisk1.0.10
asteriskasterisk1.0.11
asteriskasterisk1.0.12
asteriskasterisk1.2.0_beta1
asteriskasterisk1.2.0_beta2
asteriskasterisk1.2.5
asteriskasterisk1.2.6
asteriskasterisk1.2.7
asteriskasterisk1.2.8
asteriskasterisk1.2.9
asteriskasterisk1.2.10
asteriskasterisk1.2.11
asteriskasterisk1.2.12
asteriskasterisk1.2.13
asteriskasterisk1.2.14
asteriskasterisk1.2.15
asteriskasterisk1.2.16
asteriskasterisk1.2.17
asteriskasterisk1.4.1
asteriskasterisk1.4.2
asteriskasterisk1.4.4_2007-04-27
asteriskasterisk1.4_beta
asteriskasteriska
asteriskasteriskb.1.3.2
asteriskasteriskb.1.3.3
asteriskasteriskb.2.2.0
asteriskasterisk_appliance_developer_kit<= 0.4
asteriskasterisknowbeta_5
asteriskasterisknowbeta_6
asterisks800i_appliance1.0
asterisks800i_appliance1.0.1

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2007-3764