| Package | Affected versions | Patched versions |
|---|---|---|
| asterisk | = 0.1.7= 0.1.8= 0.1.9= 0.1.9.1= 0.2= 0.3= 0.4= 0.7= 0.7.1= 0.7.2= 0.9= 1.0= 1.0.10= 1.0.11= 1.0.7= 1.0.8= 1.0.9= 1.2.10= 1.2.11= 1.2.12= 1.2.6= 1.2.7= 1.2.8= 1.2.9= 1.2_beta1= 1.2_beta2 |
Integer overflow in the get_input function in the Skinny channel driver (chan_skinny.c) in Asterisk 1.0.x before 1.0.12 and 1.2.x before 1.2.13, as used by Cisco SCCP phones, allows remote attackers to execute arbitrary code via a certain dlen value that passes a signed integer comparison and leads to a heap-based buffer overflow.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free