CVE-2007-4455: Medium severity Asterisk Asterisk vulnerability
The SIP channel driver (chansip) in Asterisk Open Source 1.4.x before 1.4.11, AsteriskNOW before beta7, Asterisk Appliance Developer Kit 0.x before 0.8.0, and s800i (Asterisk Appliance) 1.x before 1.0.3 allows remote attackers to cause a denial of service (memory exhaustion) via a SIP dialog that causes a large number of history entries to be created.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-4455?
CVE-2007-4455 is classified as a denial of service vulnerability due to memory exhaustion.
How do I fix CVE-2007-4455?
To fix CVE-2007-4455, update Asterisk to version 1.4.11 or later.
What software is affected by CVE-2007-4455?
CVE-2007-4455 affects Asterisk Open Source 1.4.x before 1.4.11, AsteriskNOW before beta7, and the Asterisk Appliance Developer Kit 0.x before 0.8.0.
Can CVE-2007-4455 be exploited remotely?
Yes, CVE-2007-4455 can be exploited remotely by sending a specially crafted SIP dialog.
What are the potential impacts of CVE-2007-4455?
The potential impact of CVE-2007-4455 is denial of service, leading to service disruptions or outages.