CVE-2013-5641
Mandriva Linux Security Advisory 2013-223
Severity Score
7.5
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The SIP channel driver (channels/chan_sip.c) in Asterisk Open Source 1.8.17.x through 1.8.22.x, 1.8.23.x before 1.8.23.1, and 11.x before 11.5.1 and Certified Asterisk 1.8.15 before 1.8.15-cert3 and 11.2 before 11.2-cert2 allows remote attackers to cause a denial of service (NULL pointer dereference, segmentation fault, and daemon crash) via an ACK with SDP to a previously terminated channel. NOTE: some of these details are obtained from third party information.
El controlador de canal SIP (channel/chan_sip.c) en Asterisk Open Source 1.8.17.x hasta 1.8.22.x, 1.8.23.x (anteriores a 1.8.23.1), y 11.x (anteriores a 11.5.1); y Certified Asterisk 1.8.15 (anteriores a 1.8.15-cert3) y 11.2 (anteriores a 11.2-cert2) permiten a un atacante remoto causar una denegación de servicio (referencia a puntero nulo, corrupción de memoria y caída del demonio) a través de un ACK con SDP a un canal previamente cerrado. NOTA: algunos de estos detalles fueron obtenidos de información de terceros.
A remotely exploitable crash vulnerability exists in the SIP channel driver if an ACK with SDP is received after the channel has been terminated. The handling code incorrectly assumes that the channel will always be present. A remotely exploitable crash vulnerability exists in the SIP channel driver if an invalid SDP is sent in a SIP request that defines media descriptions before connection information. The handling code incorrectly attempts to reference the socket address information even though that information has not yet been set.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2013-08-28 CVE Reserved
- 2013-08-30 CVE Published
- 2024-08-06 CVE Updated
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
References (11)
| URL | Tag | Source |
|---|---|---|
| http://archives.neohapsis.com/archives/bugtraq/2013-08/0175.html | Mailing List | |
| http://osvdb.org/96691 | Vdb Entry | |
| http://secunia.com/advisories/54617 | Third Party Advisory | |
| http://www.securityfocus.com/bid/62021 | Vdb Entry | |
| http://www.securitytracker.com/id/1028956 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://downloads.asterisk.org/pub/security/AST-2013-004.html | 2013-09-12 | |
| http://seclists.org/bugtraq/2013/Aug/185 | 2013-09-12 |
| URL | Date | SRC |
|---|---|---|
| http://secunia.com/advisories/54534 | 2013-09-12 | |
| http://www.debian.org/security/2013/dsa-2749 | 2013-09-12 | |
| http://www.mandriva.com/security/advisories?name=MDVSA-2013:223 | 2013-09-12 | |
| https://issues.asterisk.org/jira/browse/ASTERISK-21064 | 2013-09-12 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 1.8.17.0 Search vendor "Digium" for product "Asterisk" and version "1.8.17.0" | - |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 1.8.17.0 Search vendor "Digium" for product "Asterisk" and version "1.8.17.0" | rc1 |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 1.8.17.0 Search vendor "Digium" for product "Asterisk" and version "1.8.17.0" | rc2 |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 1.8.17.0 Search vendor "Digium" for product "Asterisk" and version "1.8.17.0" | rc3 |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 1.8.18.0 Search vendor "Digium" for product "Asterisk" and version "1.8.18.0" | - |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 1.8.18.0 Search vendor "Digium" for product "Asterisk" and version "1.8.18.0" | rc1 |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 1.8.18.1 Search vendor "Digium" for product "Asterisk" and version "1.8.18.1" | - |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 1.8.19.0 Search vendor "Digium" for product "Asterisk" and version "1.8.19.0" | - |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 1.8.19.0 Search vendor "Digium" for product "Asterisk" and version "1.8.19.0" | rc1 |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 1.8.19.0 Search vendor "Digium" for product "Asterisk" and version "1.8.19.0" | rc3 |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 1.8.19.1 Search vendor "Digium" for product "Asterisk" and version "1.8.19.1" | - |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 1.8.20.0 Search vendor "Digium" for product "Asterisk" and version "1.8.20.0" | - |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 1.8.20.0 Search vendor "Digium" for product "Asterisk" and version "1.8.20.0" | rc1 |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 1.8.20.0 Search vendor "Digium" for product "Asterisk" and version "1.8.20.0" | rc2 |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 1.8.21.0 Search vendor "Digium" for product "Asterisk" and version "1.8.21.0" | rc1 |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 1.8.21.0 Search vendor "Digium" for product "Asterisk" and version "1.8.21.0" | rc2 |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 1.8.22.0 Search vendor "Digium" for product "Asterisk" and version "1.8.22.0" | - |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 1.8.22.0 Search vendor "Digium" for product "Asterisk" and version "1.8.22.0" | rc1 |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 1.8.22.0 Search vendor "Digium" for product "Asterisk" and version "1.8.22.0" | rc2 |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 1.8.23.0 Search vendor "Digium" for product "Asterisk" and version "1.8.23.0" | - |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 1.8.23.0 Search vendor "Digium" for product "Asterisk" and version "1.8.23.0" | rc1 |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 1.8.23.0 Search vendor "Digium" for product "Asterisk" and version "1.8.23.0" | rc2 |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 11.0.0 Search vendor "Digium" for product "Asterisk" and version "11.0.0" | - |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 11.0.0 Search vendor "Digium" for product "Asterisk" and version "11.0.0" | beta1 |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 11.0.0 Search vendor "Digium" for product "Asterisk" and version "11.0.0" | beta2 |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 11.0.0 Search vendor "Digium" for product "Asterisk" and version "11.0.0" | rc1 |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 11.0.0 Search vendor "Digium" for product "Asterisk" and version "11.0.0" | rc2 |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 11.0.1 Search vendor "Digium" for product "Asterisk" and version "11.0.1" | - |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 11.0.2 Search vendor "Digium" for product "Asterisk" and version "11.0.2" | - |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 11.1.0 Search vendor "Digium" for product "Asterisk" and version "11.1.0" | - |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 11.1.0 Search vendor "Digium" for product "Asterisk" and version "11.1.0" | rc1 |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 11.1.0 Search vendor "Digium" for product "Asterisk" and version "11.1.0" | rc3 |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 11.1.1 Search vendor "Digium" for product "Asterisk" and version "11.1.1" | - |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 11.1.2 Search vendor "Digium" for product "Asterisk" and version "11.1.2" | - |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 11.2.0 Search vendor "Digium" for product "Asterisk" and version "11.2.0" | rc1 |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 11.2.0 Search vendor "Digium" for product "Asterisk" and version "11.2.0" | rc2 |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 11.3.0 Search vendor "Digium" for product "Asterisk" and version "11.3.0" | rc1 |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 11.3.0 Search vendor "Digium" for product "Asterisk" and version "11.3.0" | rc2 |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 11.4.0 Search vendor "Digium" for product "Asterisk" and version "11.4.0" | - |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 11.4.0 Search vendor "Digium" for product "Asterisk" and version "11.4.0" | rc1 |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 11.4.0 Search vendor "Digium" for product "Asterisk" and version "11.4.0" | rc2 |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 11.4.0 Search vendor "Digium" for product "Asterisk" and version "11.4.0" | rc3 |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 11.5.0 Search vendor "Digium" for product "Asterisk" and version "11.5.0" | - |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 11.5.0 Search vendor "Digium" for product "Asterisk" and version "11.5.0" | rc1 |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 11.5.0 Search vendor "Digium" for product "Asterisk" and version "11.5.0" | rc2 |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 11.5.1 Search vendor "Digium" for product "Asterisk" and version "11.5.1" | - |
Affected
| ||||||
| Digium Search vendor "Digium" | Certified Asterisk Search vendor "Digium" for product "Certified Asterisk" | 1.8.15 Search vendor "Digium" for product "Certified Asterisk" and version "1.8.15" | - |
Affected
| ||||||
| Digium Search vendor "Digium" | Certified Asterisk Search vendor "Digium" for product "Certified Asterisk" | 1.8.15 Search vendor "Digium" for product "Certified Asterisk" and version "1.8.15" | cert1 |
Affected
| ||||||
| Digium Search vendor "Digium" | Certified Asterisk Search vendor "Digium" for product "Certified Asterisk" | 1.8.15 Search vendor "Digium" for product "Certified Asterisk" and version "1.8.15" | cert1-rc1 |
Affected
| ||||||
| Digium Search vendor "Digium" | Certified Asterisk Search vendor "Digium" for product "Certified Asterisk" | 1.8.15 Search vendor "Digium" for product "Certified Asterisk" and version "1.8.15" | cert1-rc2 |
Affected
| ||||||
| Digium Search vendor "Digium" | Certified Asterisk Search vendor "Digium" for product "Certified Asterisk" | 1.8.15 Search vendor "Digium" for product "Certified Asterisk" and version "1.8.15" | cert1-rc3 |
Affected
| ||||||
| Digium Search vendor "Digium" | Certified Asterisk Search vendor "Digium" for product "Certified Asterisk" | 1.8.15 Search vendor "Digium" for product "Certified Asterisk" and version "1.8.15" | cert2 |
Affected
| ||||||
| Digium Search vendor "Digium" | Certified Asterisk Search vendor "Digium" for product "Certified Asterisk" | 1.8.15 Search vendor "Digium" for product "Certified Asterisk" and version "1.8.15" | rc1 |
Affected
| ||||||
| Digium Search vendor "Digium" | Certified Asterisk Search vendor "Digium" for product "Certified Asterisk" | 11.2.0 Search vendor "Digium" for product "Certified Asterisk" and version "11.2.0" | - |
Affected
| ||||||
| Digium Search vendor "Digium" | Certified Asterisk Search vendor "Digium" for product "Certified Asterisk" | 11.2.0 Search vendor "Digium" for product "Certified Asterisk" and version "11.2.0" | cert1 |
Affected
| ||||||
| Digium Search vendor "Digium" | Certified Asterisk Search vendor "Digium" for product "Certified Asterisk" | 11.2.0 Search vendor "Digium" for product "Certified Asterisk" and version "11.2.0" | rc1 |
Affected
| ||||||
| Digium Search vendor "Digium" | Certified Asterisk Search vendor "Digium" for product "Certified Asterisk" | 11.2.0 Search vendor "Digium" for product "Certified Asterisk" and version "11.2.0" | rc2 |
Affected
| ||||||