CVE-2007-4280: Low severity Asterisk s800i vulnerability
The Skinny channel driver (chanskinny) in Asterisk Open Source before 1.4.10, AsteriskNOW before beta7, Appliance Developer Kit before 0.7.0, and Appliance s800i before 1.0.3 allows remote authenticated users to cause a denial of service (application crash) via a CAPABILITIESRESMESSAGE packet with a capabilities count larger than the capabilitiesresmessage array population.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-4280?
CVE-2007-4280 has a severity rating that indicates it can cause a denial of service through application crashes.
How do I fix CVE-2007-4280?
To fix CVE-2007-4280, upgrade to Asterisk version 1.4.10 or higher, or the corresponding secure versions of affected software.
Which versions are affected by CVE-2007-4280?
CVE-2007-4280 affects Asterisk versions prior to 1.4.10, AsteriskNOW beta versions before beta7, and specific versions of the Appliance Developer Kit and s800i.
What causes the vulnerability CVE-2007-4280?
CVE-2007-4280 is caused by the processing of a CAPABILITIES_RES_MESSAGE packet by the Skinny channel driver in vulnerable Asterisk versions.
Is remote access required to exploit CVE-2007-4280?
Yes, CVE-2007-4280 requires remote authenticated user access to exploit the denial of service vulnerability.