virus logo Intrusion Prevention

Digium.Asterisk.T.38.Buffer.Overflow

description-logoDescription

This indicates an attempt to exploit a remote code-execution vulnerability in Asterisk.
The vulnerability is caused by a stack-based buffer overflow in the process_sdp function in chan_sip.c. It allows remote attackers to execute arbitrary code.

affected-products-logoAffected Products

Asterisk AsteriskNow Beta 5
Asterisk Asterisk 1.4.2
Asterisk Asterisk 1.4.1
Asterisk Asterisk 1.4 Beta
Asterisk Appliance Developers Kit 0.3

Impact logoImpact

System compromise: Remote code execution.

recomended-action-logoRecommended Actions

Apply the patch, available from the following web sites:
Asterisk Asterisk 1.4 Beta
Asterisk Asterisk 1.4.1
Asterisk Asterisk 1.4.2

Telemetry logoTelemetry

Coverage

IPS (Regular DB)
IPS (Extended DB)

Version Updates

Date Version Detail
2020-10-22 16.948 Name:Asterisk.
T.
38.
Buffer.
Overflow:Digium.
Asterisk.
T.
38.
Buffer.
Overflow

References

http://www.securityfocus.com/archive/1/archive/1/466883/100/0/threaded
ID 14794
Created Apr 28, 2008
Updated Nov 04, 2021
Risk black-background-circle-icon black-background-circle-icon black-background-circle-icon black-background-circle-icon lightgray-background-circle-icon
CVE ID CVE-2007-2293
Exploit Prediction Score 95.62%
Default Action drop
Active
Affected OS Other
Affected App Other