Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2015-1558

Asterisk Open Source 12.x before 12.8.1 and 13.x before 13.1.1, when using the PJSIP channel driver, does not properly reclaim RTP ports, which allows remote authenticated users to cause a denial of service (file descriptor consumption) via an SDP offer containing only incompatible codecs.

Published

2015-02-09T11:59:00.067

Last Modified

2025-04-12T10:46:40.837

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 3.5 (LOW)

CVSSv2 Vector

AV:N/AC:M/Au:S/C:N/I:N/A:P

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: SINGLE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: PARTIAL
Exploitability Score

6.8

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-399
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application digium asterisk 12.0.0 Yes
Application digium asterisk 12.1.0 Yes
Application digium asterisk 12.1.0 Yes
Application digium asterisk 12.1.0 Yes
Application digium asterisk 12.1.0 Yes
Application digium asterisk 12.1.1 Yes
Application digium asterisk 12.2.0 Yes
Application digium asterisk 12.2.0 Yes
Application digium asterisk 12.2.0 Yes
Application digium asterisk 12.2.0 Yes
Application digium asterisk 12.3.0 Yes
Application digium asterisk 12.3.0 Yes
Application digium asterisk 12.3.0 Yes
Application digium asterisk 12.3.1 Yes
Application digium asterisk 12.3.2 Yes
Application digium asterisk 12.4.0 Yes
Application digium asterisk 12.4.0 Yes
Application digium asterisk 12.5.0 Yes
Application digium asterisk 12.5.0 Yes
Application digium asterisk 12.6.0 Yes
Application digium asterisk 12.6.0 Yes
Application digium asterisk 12.7.0 Yes
Application digium asterisk 12.7.0 Yes
Application digium asterisk 12.7.0 Yes
Application digium asterisk 12.8.0 Yes
Application digium asterisk 12.8.0 Yes
Application digium asterisk 12.8.0 Yes
Application digium asterisk 12.8.1 Yes
Application digium asterisk 13.0.0 Yes
Application digium asterisk 13.1.0 Yes
Application digium asterisk 13.1.0 Yes
Application digium asterisk 13.1.0 Yes
Application digium asterisk 13.2.0 Yes
Application digium asterisk 13.2.0 Yes
References