Description
Double free vulnerability in apps/app_voicemail.c in Asterisk Open Source 1.8.x before 1.8.13.1 and 10.x before 10.5.2, Certified Asterisk 1.8.11-certx before 1.8.11-cert4, and Asterisk Digiumphones 10.x.x-digiumphones before 10.5.2-digiumphones allows remote authenticated users to cause a denial of service (daemon crash) by establishing multiple voicemail sessions and accessing both the Urgent mailbox and the INBOX mailbox.
Published: 2012-07-09
Score: 4.0 Medium
EPSS: 7.2% Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DSA Debian DSA DSA-2550-1 asterisk security update
Debian DSA Debian DSA DSA-2550-2 asterisk regression update
EUVD EUVD EUVD-2012-3759 Double free vulnerability in apps/app_voicemail.c in Asterisk Open Source 1.8.x before 1.8.13.1 and 10.x before 10.5.2, Certified Asterisk 1.8.11-certx before 1.8.11-cert4, and Asterisk Digiumphones 10.x.x-digiumphones before 10.5.2-digiumphones allows remote authenticated users to cause a denial of service (daemon crash) by establishing multiple voicemail sessions and accessing both the Urgent mailbox and the INBOX mailbox.
History

No history.

Subscriptions

Digium Asterisk Asteriske Certified Asterisk
cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2024-08-06T20:21:02.907Z

Reserved: 2012-06-27T00:00:00.000Z

Link: CVE-2012-3812

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2012-07-09T22:55:01.260

Modified: 2025-04-11T00:51:21.963

Link: CVE-2012-3812

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses