CVE-2013-7100

Publicada em 19 dez 2013 · Atualizada em 06 ago 2024

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 4.3%

Buffer overflow in the unpacksms16 function in apps/app_sms.c in Asterisk Open Source 1.8.x before 1.8.24.1, 10.x before 10.12.4, and 11.x before 11.6.1; Asterisk with Digiumphones 10.x-digiumphones before 10.12.4-digiumphones; and Certified Asterisk 1.8.x before 1.8.15-cert4 and 11.x before 11.2-cert3 allows remote attackers to cause a denial of service (daemon crash) via a 16-bit SMS message with an odd number of bytes, which triggers an infinite loop.

Produtos afetados

n/a · n/a

Referências

http://archives.neohapsis.com/archives/bugtraq/2013-12/0089.html http://downloads.asterisk.org/pub/security/AST-2013-006.html http://osvdb.org/101100 http://secunia.com/advisories/56294 https://exchange.xforce.ibmcloud.com/vulnerabilities/89825 https://issues.asterisk.org/jira/browse/ASTERISK-22590 http://www.debian.org/security/2014/dsa-2835 http://www.mandriva.com/security/advisories?name=MDVSA-2013:300 http://www.securityfocus.com/bid/64364 http://www.securitytracker.com/id/1029499