DEBIAN-CVE-2007-4280

See a problem?
Please try reporting it to the source first.

Source

https://security-tracker.debian.org/tracker/CVE-2007-4280

Import Source

https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2007-4280.json

JSON Data

https://api.osv.dev/v1/vulns/DEBIAN-CVE-2007-4280

Upstream

CVE-2007-4280

Published

2007-08-09T21:17:00Z

Modified

2025-11-19T01:19:04.987854Z

Summary

[none]

Details

The Skinny channel driver (chanskinny) in Asterisk Open Source before 1.4.10, AsteriskNOW before beta7, Appliance Developer Kit before 0.7.0, and Appliance s800i before 1.0.3 allows remote authenticated users to cause a denial of service (application crash) via a CAPABILITIESRESMESSAGE packet with a capabilities count larger than the capabilitiesres_message array population.

References

https://security-tracker.debian.org/tracker/CVE-2007-4280

Affected packages

Debian:11 / asterisk

Package

Name: asterisk
Purl: pkg:deb/debian/asterisk?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:1.4.10~dfsg-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Database specific

source

"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2007-4280.json"