cvelist/2009/4xxx/CVE-2009-4055.json
2018-10-10 15:05:20 -04:00

143 lines
4.7 KiB
JSON

{
"CVE_data_meta" : {
"ASSIGNER" : "cve@mitre.org",
"ID" : "CVE-2009-4055",
"STATE" : "PUBLIC"
},
"affects" : {
"vendor" : {
"vendor_data" : [
{
"product" : {
"product_data" : [
{
"product_name" : "n/a",
"version" : {
"version_data" : [
{
"version_value" : "n/a"
}
]
}
}
]
},
"vendor_name" : "n/a"
}
]
}
},
"data_format" : "MITRE",
"data_type" : "CVE",
"data_version" : "4.0",
"description" : {
"description_data" : [
{
"lang" : "eng",
"value" : "rtp.c in Asterisk Open Source 1.2.x before 1.2.37, 1.4.x before 1.4.27.1, 1.6.0.x before 1.6.0.19, and 1.6.1.x before 1.6.1.11; Business Edition B.x.x before B.2.5.13, C.2.x.x before C.2.4.6, and C.3.x.x before C.3.2.3; and s800i 1.3.x before 1.3.0.6 allows remote attackers to cause a denial of service (daemon crash) via an RTP comfort noise payload with a long data length."
}
]
},
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng",
"value" : "n/a"
}
]
}
]
},
"references" : {
"reference_data" : [
{
"name" : "20091130 AST-2009-010: RTP Remote Crash Vulnerability",
"refsource" : "BUGTRAQ",
"url" : "http://www.securityfocus.com/archive/1/508147/100/0/threaded"
},
{
"name" : "http://downloads.asterisk.org/pub/security/AST-2009-010-1.2.diff.txt",
"refsource" : "CONFIRM",
"url" : "http://downloads.asterisk.org/pub/security/AST-2009-010-1.2.diff.txt"
},
{
"name" : "http://downloads.asterisk.org/pub/security/AST-2009-010-1.4.diff.txt",
"refsource" : "CONFIRM",
"url" : "http://downloads.asterisk.org/pub/security/AST-2009-010-1.4.diff.txt"
},
{
"name" : "http://downloads.asterisk.org/pub/security/AST-2009-010-1.6.0.diff.txt",
"refsource" : "CONFIRM",
"url" : "http://downloads.asterisk.org/pub/security/AST-2009-010-1.6.0.diff.txt"
},
{
"name" : "http://downloads.asterisk.org/pub/security/AST-2009-010-1.6.1.diff.txt",
"refsource" : "CONFIRM",
"url" : "http://downloads.asterisk.org/pub/security/AST-2009-010-1.6.1.diff.txt"
},
{
"name" : "http://downloads.digium.com/pub/security/AST-2009-010.html",
"refsource" : "CONFIRM",
"url" : "http://downloads.digium.com/pub/security/AST-2009-010.html"
},
{
"name" : "https://issues.asterisk.org/view.php?id=16242",
"refsource" : "CONFIRM",
"url" : "https://issues.asterisk.org/view.php?id=16242"
},
{
"name" : "DSA-1952",
"refsource" : "DEBIAN",
"url" : "http://www.debian.org/security/2009/dsa-1952"
},
{
"name" : "FEDORA-2009-12461",
"refsource" : "FEDORA",
"url" : "http://www.redhat.com/archives/fedora-package-announce/2009-December/msg00759.html"
},
{
"name" : "37153",
"refsource" : "BID",
"url" : "http://www.securityfocus.com/bid/37153"
},
{
"name" : "60569",
"refsource" : "OSVDB",
"url" : "http://www.osvdb.org/60569"
},
{
"name" : "1023249",
"refsource" : "SECTRACK",
"url" : "http://securitytracker.com/id?1023249"
},
{
"name" : "37530",
"refsource" : "SECUNIA",
"url" : "http://secunia.com/advisories/37530"
},
{
"name" : "37708",
"refsource" : "SECUNIA",
"url" : "http://secunia.com/advisories/37708"
},
{
"name" : "37677",
"refsource" : "SECUNIA",
"url" : "http://secunia.com/advisories/37677"
},
{
"name" : "ADV-2009-3368",
"refsource" : "VUPEN",
"url" : "http://www.vupen.com/english/advisories/2009/3368"
},
{
"name" : "asterisk-rtp-comfortnoise-dos(54471)",
"refsource" : "XF",
"url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/54471"
}
]
}
}