CVE-2012-5976
Severity CVSS v4.0:
Pending analysis
Type:
CWE-119
Buffer Errors
Publication date:
04/01/2013
Last modified:
11/04/2025
Description
Multiple stack consumption vulnerabilities in Asterisk Open Source 1.8.x before 1.8.19.1, 10.x before 10.11.1, and 11.x before 11.1.2; Certified Asterisk 1.8.11 before 1.8.11-cert10; and Asterisk Digiumphones 10.x-digiumphones before 10.11.1-digiumphones allow remote attackers to cause a denial of service (daemon crash) via TCP data using the (1) SIP, (2) HTTP, or (3) XMPP protocol.
Impact
Base Score 2.0
5.00
Severity 2.0
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:* | 1.8.19.0 (including) | |
| cpe:2.3:a:digium:asterisk:1.8.0:*:*:*:*:*:*:* | ||
| cpe:2.3:a:digium:asterisk:1.8.0:beta1:*:*:*:*:*:* | ||
| cpe:2.3:a:digium:asterisk:1.8.0:beta2:*:*:*:*:*:* | ||
| cpe:2.3:a:digium:asterisk:1.8.0:beta3:*:*:*:*:*:* | ||
| cpe:2.3:a:digium:asterisk:1.8.0:beta4:*:*:*:*:*:* | ||
| cpe:2.3:a:digium:asterisk:1.8.0:beta5:*:*:*:*:*:* | ||
| cpe:2.3:a:digium:asterisk:1.8.0:rc2:*:*:*:*:*:* | ||
| cpe:2.3:a:digium:asterisk:1.8.0:rc3:*:*:*:*:*:* | ||
| cpe:2.3:a:digium:asterisk:1.8.0:rc4:*:*:*:*:*:* | ||
| cpe:2.3:a:digium:asterisk:1.8.0:rc5:*:*:*:*:*:* | ||
| cpe:2.3:a:digium:asterisk:1.8.1:*:*:*:*:*:*:* | ||
| cpe:2.3:a:digium:asterisk:1.8.1:rc1:*:*:*:*:*:* | ||
| cpe:2.3:a:digium:asterisk:1.8.1.1:*:*:*:*:*:*:* | ||
| cpe:2.3:a:digium:asterisk:1.8.1.2:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page