7.8

CVE-2006-5445

Unspecified vulnerability in the SIP channel driver (channels/chan_sip.c) in Asterisk 1.2.x before 1.2.13 and 1.4.x before 1.4.0-beta3 allows remote attackers to cause a denial of service (resource consumption) via unspecified vectors that result in the creation of "a real pvt structure" that uses more resources than necessary.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Digium ≫ Asterisk Version1.2.0_beta1
Digium ≫ Asterisk Version1.2.0_beta2
Digium ≫ Asterisk Version1.2.6
Digium ≫ Asterisk Version1.2.7
Digium ≫ Asterisk Version1.2.8
Digium ≫ Asterisk Version1.2.9
Digium ≫ Asterisk Version1.2.10
Digium ≫ Asterisk Version1.2.11
Digium ≫ Asterisk Version1.2.12
Digium ≫ Asterisk Version1.2.12.1
Digium ≫ Asterisk Version1.4.0
Digium ≫ Asterisk Version1.4.0_beta1
Digium ≫ Asterisk Version1.4.0_beta2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 7.93% 0.916
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.8 10 6.9
AV:N/AC:L/Au:N/C:N/I:N/A:C