CVE-2007-1693

Publication date 17 May 2007

Last updated 17 July 2025

Ubuntu priority

Medium

Why this priority?

The SIP channel module in Yet Another Telephony Engine (Yate) before 1.2.0 sets the caller_info_uri parameter using an incorrect variable that can be NULL, which allows remote attackers to cause a denial of service (NULL dereference and application crash) via a Call-Info header without a purpose parameter.

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
yate 9.10 karmic
Fixed 1.2.0-1.dfsg-2
9.04 jaunty
Fixed 1.2.0-1.dfsg-2
8.10 intrepid
Fixed 1.2.0-1.dfsg-2
8.04 LTS hardy
Fixed 1.2.0-1.dfsg-2
7.10 gutsy
Fixed 1.2.0-1.dfsg-2
7.04 feisty Ignored end of life, was needed
6.10 edgy Ignored end of life, was needed
6.06 LTS dapper Ignored end of life