CVE-2012-5976

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-01-04 · updated 2026-06-16
Weakness: CWE-119

Description

Multiple stack consumption vulnerabilities in Asterisk Open Source 1.8.x before 1.8.19.1, 10.x before 10.11.1, and 11.x before 11.1.2; Certified Asterisk 1.8.11 before 1.8.11-cert10; and Asterisk Digiumphones 10.x-digiumphones before 10.11.1-digiumphones allow remote attackers to cause a denial of service (daemon crash) via TCP data using the (1) SIP, (2) HTTP, or (3) XMPP protocol.

Affected products

Digium Asterisk: through 1.8.19.0; 1.8.0, 1.8.0-beta1, 1.8.0-beta2, 1.8.0-beta3, 1.8.0-beta4, 1.8.0-beta5 (+157)
Digium Certified Asterisk: 1.8.11-cert, 1.8.11-cert1, 1.8.11-cert2, 1.8.11-cert3, 1.8.11-cert4, 1.8.11-cert5 (+4)

References

Get alerted when CVE-2012-5976 or the next vulnerability affects your stack