CVE-2016-7550 — NULL Pointer Dereference in Asterisk

CWE-476 — NULL Pointer Dereference7 documents5 sources
Severity
7.5HIGHNVD
OSV5.5
EPSS
0.1%
top 68.74%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Digium AsteriskLinux KernelDebian Asterisk
Timeline
PublishedMay 23
Latest updateMay 24

Description

asterisk 13.10.0 is affected by: denial of service issues in asterisk. The impact is: cause a denial of service (remote).

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages4 packages

▶debiandebian/asterisk< asterisk 1:13.11.2~dfsg-1 (bullseye)
▶Debiandigium/asterisk< 1:13.11.2~dfsg-1
▶NVDdigium/asterisk13.10.0
▶Ubuntulinux/linux_kernel< 3.13.0-79.123

🔴Vulnerability Details

4
GHSA
GHSA-5w4x-m7wq-hcg9: asterisk 13↗2022-05-24
▶
OSV
CVE-2016-7550: asterisk 13↗2019-05-23
▶
OSV
linux vulnerabilities↗2016-02-22
▶
OSV
linux-lts-vivid vulnerabilities↗2016-02-22
▶

📋Vendor Advisories

1
Debian
CVE-2016-7550: asterisk - asterisk 13.10.0 is affected by: denial of service issues in asterisk. The impac...↗2016
▶

💬Community

1
Bugzilla
CVE-2016-7550 asterisk: crash via long contact URIs in REGISTER↗2019-05-29
▶