Asterisk Open Source 1.6.0.x before 1.6.0.22, 1.6.1.x before 1.6.1.14, and 1.6.2.x before 1.6.2.2, and Business Edition C.3 before C.3.3.2, allows remote attackers to cause a denial of service (daemon crash) via an SIP T.38 negotiation with an SDP FaxMaxDatagram field that is (1) missing, (2) modified to contain a negative number, or (3) modified to contain a large number.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2010-02-04T18:00:00

Updated: 2024-08-07T00:52:18.727Z

Reserved: 2010-01-27T00:00:00

Link: CVE-2010-0441

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2010-02-04T20:15:24.030

Modified: 2018-10-10T19:52:50.927

Link: CVE-2010-0441

cve-icon Redhat

Severity : Moderate

Publid Date: 2010-02-02T00:00:00Z

Links: CVE-2010-0441 - Bugzilla