CVE-2007-3764

Publication date 18 July 2007

Last updated 24 July 2024


Ubuntu priority

The Skinny channel driver (chan_skinny) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote attackers to cause a denial of service (crash) via a certain data length value in a crafted packet, which results in an “overly large memcpy.”

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
asterisk 9.10 karmic
Fixed 1:1.4.8dfsg-1
9.04 jaunty
Fixed 1:1.4.8dfsg-1
8.10 intrepid
Fixed 1:1.4.8dfsg-1
8.04 LTS hardy
Fixed 1:1.4.8dfsg-1
7.10 gutsy
Fixed 1:1.4.8dfsg-1
7.04 feisty Ignored end of life, was needed
6.10 edgy Ignored end of life, was needed
6.06 LTS dapper Ignored end of life