Approved changes feed: RSS · Atom

cpe:2.3:a:digium:asterisk:1.4.0_beta2:*:*:*:*:*:*:*

part: a version: 1.4.0_beta2 update: *

VendorDigium (05ad29b7-5b41-56d5-935d-a279ab7f14bc)
ProductAsterisk (a75a6886-b0b4-5160-9cfa-f749f3c86956)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/asterisk/asterisk purl2cpe 2026-06-01 10:15:41.829236

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-1306 vulnerable 2026-06-08 04:49:42.043244 Details available
Asterisk 1.4 before 1.4.1 and 1.2 before 1.2.16 allows remote attackers to cause a denial of service (crash) by sending a Session Initiation Protocol (SIP) packet without a URI and SIP-version header, which results in a NULL pointer dereference.
Published: 2007-03-07T00:00:00.000Z
Updated: 2024-08-07T12:50:35.142Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-5445 vulnerable 2026-06-08 04:49:20.525318 Details available
Unspecified vulnerability in the SIP channel driver (channels/chan_sip.c) in Asterisk 1.2.x before 1.2.13 and 1.4.x before 1.4.0-beta3 allows remote attackers to cause a denial of service (resource consumption) via unspecified vectors that result in the creation of "a real pvt structure" that uses more resources than necessary.
Published: 2006-10-23T17:00:00.000Z
Updated: 2024-08-07T19:48:30.533Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.