Unrated severityNVD Advisory· Published Jun 2, 2012· Updated Apr 29, 2026

CVE-2012-2947

Description

chan_iax2.c in the IAX2 channel driver in Certified Asterisk 1.8.11-cert before 1.8.11-cert2 and Asterisk Open Source 1.8.x before 1.8.12.1 and 10.x before 10.4.1, when a certain mohinterpret setting is enabled, allows remote attackers to cause a denial of service (daemon crash) by placing a call on hold.

Affected products

105

Digium/Asterisk102 versions
cpe:2.3:a:digium:asterisk:10.0.0:*:*:*:*:*:*:*+ 101 more
- cpe:2.3:a:digium:asterisk:10.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:10.0.0:beta1:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:10.0.0:beta2:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:10.0.0:rc1:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:10.0.0:rc2:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:10.0.0:rc3:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:10.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:10.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:10.1.0:rc1:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:10.1.0:rc2:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:10.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:10.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:10.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:10.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:10.2.0:rc1:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:10.2.0:rc2:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:10.2.0:rc3:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:10.2.0:rc4:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:10.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:10.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:10.3.0:rc2:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:10.3.0:rc3:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:10.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:10.4.0:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:10.4.0:rc1:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:10.4.0:rc2:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:10.4.0:rc3:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.0:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.0:beta1:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.0:beta2:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.0:beta3:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.0:beta4:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.0:beta5:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.0:rc2:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.0:rc3:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.0:rc4:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.0:rc5:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.1:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.10.0:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.10.0:rc1:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.10.0:rc2:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.10.0:rc3:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.10.0:rc4:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.10.1:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.11.0:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.11.0:rc2:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.11.0:rc3:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.11.1:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.12:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.12.0:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.12.0:rc1:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.12.0:rc2:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.12.0:rc3:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.1:rc1:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.2:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.2.3:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.2.4:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.3:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.3.2:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.3.3:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.3:rc1:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.3:rc2:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.3:rc3:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.4:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.4.1:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.4.2:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.4.3:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.4.4:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.4:rc1:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.4:rc2:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.4:rc3:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.5:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.5:rc1:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.6.0:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.6.0:rc1:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.6.0:rc2:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.6.0:rc3:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.7.0:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.7.0:rc1:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.7.0:rc2:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.7.1:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.8.0:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.8.0:rc1:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.8.0:rc2:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.8.0:rc3:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.8.0:rc4:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.8.0:rc5:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.8.1:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.8.2:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.9.0:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.9.0:rc1:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.9.0:rc2:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.9.0:rc3:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.9.1:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.9.2:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:1.8.9.3:*:*:*:*:*:*:*
Digium/Certified Asterisk2 versions
cpe:2.3:a:digium:certified_asterisk:1.8.11:cert:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:digium:certified_asterisk:1.8.11:cert:*:*:*:*:*:*
- cpe:2.3:a:digium:certified_asterisk:1.8.11:cert1:*:*:*:*:*:*
Debian/Debian Linux
cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

downloads.asterisk.org/pub/security/AST-2012-007.htmlnvdVendor Advisory
www.debian.org/security/2012/dsa-2493nvdThird Party Advisory
www.securitytracker.com/idnvdThird Party AdvisoryVDB Entry
archives.neohapsis.com/archives/bugtraq/2012-05/0144.htmlnvdBroken Link
secunia.com/advisories/49303nvdNot Applicable

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000