VYPR
Unrated severityNVD Advisory· Published Mar 21, 2007· Updated Apr 23, 2026

CVE-2007-1561

CVE-2007-1561

Description

The channel driver in Asterisk before 1.2.17 and 1.4.x before 1.4.2 allows remote attackers to cause a denial of service (crash) via a SIP INVITE message with an SDP containing one valid and one invalid IP address.

Affected products

4
  • Asterisk/Asterisk4 versions
    cpe:2.3:a:asterisk:asterisk:1.2.14:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:asterisk:asterisk:1.2.14:*:*:*:*:*:*:*
    • cpe:2.3:a:asterisk:asterisk:1.2.15:*:*:*:*:*:*:*
    • cpe:2.3:a:asterisk:asterisk:1.2.16:*:*:*:*:*:*:*
    • cpe:2.3:a:asterisk:asterisk:1.4.1:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

16

News mentions

0

No linked articles in our index yet.