Unrated severityNVD Advisory· Published Mar 7, 2007· Updated Jun 16, 2026
CVE-2007-1306
CVE-2007-1306
Description
Asterisk 1.4 before 1.4.1 and 1.2 before 1.2.16 allows remote attackers to cause a denial of service (crash) by sending a Session Initiation Protocol (SIP) packet without a URI and SIP-version header, which results in a NULL pointer dereference.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
19cpe:2.3:a:digium:asterisk:1.2.0_beta1:*:*:*:*:*:*:*+ 17 more
- cpe:2.3:a:digium:asterisk:1.2.0_beta1:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.2.0_beta2:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.2.10:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.2.11:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.2.12:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.2.12.1:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.2.13:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.2.14:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.2.15:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.2.6:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.2.7:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.2.8:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.2.9:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.2_beta1:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.2_beta2:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.4.0:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.4.0_beta1:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.4.0_beta2:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
15- secunia.com/advisories/24578nvdVendor Advisory
- secunia.com/advisories/25582nvdVendor Advisory
- www.vupen.com/english/advisories/2007/0830nvdVendor Advisory
- www.kb.cert.org/vuls/id/228032nvdUS Government Resource
- asterisk.org/node/48319nvd
- asterisk.org/node/48320nvd
- labs.musecurity.com/advisories/MU-200703-01.txtnvd
- secunia.com/advisories/24380nvd
- security.gentoo.org/glsa/glsa-200703-14.xmlnvd
- www.debian.org/security/2007/dsa-1358nvd
- www.novell.com/linux/security/advisories/2007_34_asterisk.htmlnvd
- www.osvdb.org/33888nvd
- www.securityfocus.com/bid/22838nvd
- www.securitytracker.com/idnvd
- exchange.xforce.ibmcloud.com/vulnerabilities/32830nvd
News mentions
0No linked articles in our index yet.