CVE-2013-2685
Estado: ModificadaAlta (7.5)—
Stack-based buffer overflow in res/res_format_attr_h264.c in Asterisk Open Source 11.x before 11.2.2 allows remote attackers to execute arbitrary code via a long sprop-parameter-sets H.264 media attribute in a SIP Session Description Protocol (SDP) header.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
- Puntuación base: 7.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 2.62%
- Percentil entre todas las CVEs puntuadas: 85
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- CWE-119
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2013-2685",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 7.5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 6.4,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2013-04-01T16:55:03.893",
"references": [
{
"url": "http://downloads.asterisk.org/pub/security/AST-2013-001.html",
"source": "cve@mitre.org"
},
{
"url": "https://issues.asterisk.org/jira/browse/ASTERISK-20901",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://downloads.asterisk.org/pub/security/AST-2013-001.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://issues.asterisk.org/jira/browse/ASTERISK-20901",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-119"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Stack-based buffer overflow in res/res_format_attr_h264.c in Asterisk Open Source 11.x before 11.2.2 allows remote attackers to execute arbitrary code via a long sprop-parameter-sets H.264 media attribute in a SIP Session Description Protocol (SDP) header."
},
{
"lang": "es",
"value": "Desbordamiento de búfer basado en pila en res/res_format_attr_h264.c en Asterisk Open Source v11.x antes de v11.2.2 que permite a atacantes remotos ejecutar código arbitrario a través de un long sprop-parameter-sets el atributo media H.264 en un SIP Protocolo de Descripción de Sesión (SDP) encabezado."
}
],
"lastModified": "2026-06-16T23:53:48.013",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:asterisk:open_source:11.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AF0D8EF3-6BA5-4C60-8130-DF62A9592CE7"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:11.0.0:beta1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1B00830D-18F2-4A68-926A-2FD397674F9D"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:11.0.0:beta2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3C2E04B4-C70D-40AE-AEA5-0D39304F6C18"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:11.0.0:rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9C86349C-EBD4-4857-9B4B-7A608F32BBCE"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:11.0.0:rc2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7E88AC6C-50F6-486D-B0D0-97477FCD520D"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:11.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "171B2532-F5D2-4C3C-9C23-405839F590BB"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:11.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2E5923D0-F168-404B-9190-871D52D74DAE"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:11.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "50617F5A-5BAE-4C4A-975A-B23E9171ABDA"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:11.1.0:rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BE09B558-576C-461C-8089-8EE59F168ADF"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:11.1.0:rc3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "83DEBCA4-F4CC-4E78-A80F-C673105FA868"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:11.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4A3720E8-67C2-492D-9DBA-6ED9085CB01F"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:11.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "28E2C7E4-226C-4420-856D-E420633E301F"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:11.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CFA3CDE0-AAE5-48A4-98C3-767CCCC3C9E2"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:11.2.0:rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8B73137F-79EA-48DD-B29E-41DB8C20711B"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:11.2.0:rc2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1F185B3E-9594-4AFD-B16B-6C82A03B93B9"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:11.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B3740427-BBC9-4D76-9F54-C13AF097CD05"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}