CVE-2007-3764: Medium severity Asterisk Asterisk vulnerability
The Skinny channel driver (chanskinny) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote attackers to cause a denial of service (crash) via a certain data length value in a crafted packet, which results in an "overly large memcpy."
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-3764?
CVE-2007-3764 has a severity rating that indicates it can cause a denial of service due to crashes in multiple versions of Asterisk.
How do I fix CVE-2007-3764?
To fix CVE-2007-3764, you should upgrade to Asterisk versions 1.2.22 or later, 1.4.8 or later, or respective non-vulnerable versions of affected software.
Which versions of Asterisk are affected by CVE-2007-3764?
Asterisk versions prior to 1.2.22, 1.4.x prior to 1.4.8, and several versions of Business Edition, AsteriskNOW, and the Appliance Developer Kit are affected by CVE-2007-3764.
Can CVE-2007-3764 be exploited remotely?
Yes, CVE-2007-3764 can be exploited remotely by attackers to cause a denial of service through specific data length values.
What type of vulnerability is CVE-2007-3764 classified as?
CVE-2007-3764 is classified as a denial of service vulnerability that affects the Skinny channel driver in Asterisk.