CVE-2012-1184

Published Sep 18, 2012 CVSS 2.0 · 7.5 High EPSS 16.4% KEV · Not listed
Description
Stack-based buffer overflow in the ast_parse_digest function in main/utils.c in Asterisk 1.8.x before 1.8.10.1 and 10.x before 10.2.1 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string in an HTTP Digest Authentication header.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 6, 2024, 6:53 PM
Reserved
Feb 14, 2012, 12:00 AM
Status
Modified
Published
Sep 18, 2012, 6:55 PM
Modified
Jun 16, 2026, 11:39 PM