7.8

CVE-2006-5445

Unspecified vulnerability in the SIP channel driver (channels/chan_sip.c) in Asterisk 1.2.x before 1.2.13 and 1.4.x before 1.4.0-beta3 allows remote attackers to cause a denial of service (resource consumption) via unspecified vectors that result in the creation of "a real pvt structure" that uses more resources than necessary.

Data is provided by the National Vulnerability Database (NVD)
Digium ≫ Asterisk Version1.2.0_beta1
Digium ≫ Asterisk Version1.2.0_beta2
Digium ≫ Asterisk Version1.2.6
Digium ≫ Asterisk Version1.2.7
Digium ≫ Asterisk Version1.2.8
Digium ≫ Asterisk Version1.2.9
Digium ≫ Asterisk Version1.2.10
Digium ≫ Asterisk Version1.2.11
Digium ≫ Asterisk Version1.2.12
Digium ≫ Asterisk Version1.2.12.1
Digium ≫ Asterisk Version1.4.0
Digium ≫ Asterisk Version1.4.0_beta1
Digium ≫ Asterisk Version1.4.0_beta2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 7.93% 0.916
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.8 10 6.9
AV:N/AC:L/Au:N/C:N/I:N/A:C