CVE-2012-2948
Estado: ModificadaMedia (4)—
chan_skinny.c in the Skinny (aka SCCP) channel driver in Certified Asterisk 1.8.11-cert before 1.8.11-cert2 and Asterisk Open Source 1.8.x before 1.8.12.1 and 10.x before 10.4.1 allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) by closing a connection in off-hook mode.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:L/Au:S/C:N/I:N/A:P
- Puntuación base: 4
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 2.12%
- Percentil entre todas las CVEs puntuadas: 81
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (3)
CWE
- CWE-399
Referencias
- http://archives.neohapsis.com/archives/bugtraq/2012-05/0145.html
- http://downloads.asterisk.org/pub/security/AST-2012-008.html
- http://secunia.com/advisories/49303
- http://www.debian.org/security/2012/dsa-2493
- http://www.securityfocus.com/bid/53723
- http://www.securitytracker.com/id?1027103
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75937
- http://archives.neohapsis.com/archives/bugtraq/2012-05/0145.html
- http://downloads.asterisk.org/pub/security/AST-2012-008.html
- http://secunia.com/advisories/49303
- http://www.debian.org/security/2012/dsa-2493
- http://www.securityfocus.com/bid/53723
- http://www.securitytracker.com/id?1027103
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75937
JSON original (NVD)
Mostrar
{
"id": "CVE-2012-2948",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 4,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:P",
"authentication": "SINGLE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 8,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2012-06-02T15:55:01.027",
"references": [
{
"url": "http://archives.neohapsis.com/archives/bugtraq/2012-05/0145.html",
"source": "cve@mitre.org"
},
{
"url": "http://downloads.asterisk.org/pub/security/AST-2012-008.html",
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/49303",
"source": "cve@mitre.org"
},
{
"url": "http://www.debian.org/security/2012/dsa-2493",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/53723",
"source": "cve@mitre.org"
},
{
"url": "http://www.securitytracker.com/id?1027103",
"source": "cve@mitre.org"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/75937",
"source": "cve@mitre.org"
},
{
"url": "http://archives.neohapsis.com/archives/bugtraq/2012-05/0145.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://downloads.asterisk.org/pub/security/AST-2012-008.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/49303",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.debian.org/security/2012/dsa-2493",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/53723",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securitytracker.com/id?1027103",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/75937",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-399"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "chan_skinny.c in the Skinny (aka SCCP) channel driver in Certified Asterisk 1.8.11-cert before 1.8.11-cert2 and Asterisk Open Source 1.8.x before 1.8.12.1 and 10.x before 10.4.1 allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) by closing a connection in off-hook mode."
},
{
"lang": "es",
"value": "chan_skinny.c en el controlador de canal de Skinny (alias SCCP) en Certified Asterisk 1.8.11-cert antes de v1.8.11-cert2 y Asterisk Open Source v1.8.x antes de v1.8.12.1 y v10.x antes de v10.4.1, permite a usuarios autenticados remotamente provocar una denegación de servicio (eliminar la referencia del puntero NULL y caída demonio) por el cierre de una conexión en el modo de descuelgue."
}
],
"lastModified": "2026-06-16T23:42:24.620",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:asterisk:certified_asterisk:1.8.11:cert:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4889B1B5-5160-476E-A1C0-BEAE63C85CEA"
},
{
"criteria": "cpe:2.3:a:asterisk:certified_asterisk:1.8.11:cert1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "62867AEF-D685-4B1F-8AB9-D1CCAC559821"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:asterisk:open_source:1.8.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ACE48FBD-2560-4477-ABD2-C90729523BC1"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:1.8.0:beta1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "97F03C40-6B70-41D1-96CF-DD5F2924D0C5"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:1.8.0:beta2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B8F0B6E3-37B8-4780-BB17-D471A7AB7E58"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:1.8.0:beta3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "445941A9-EE2C-45C0-BCEB-9EC7F9F9439D"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:1.8.0:beta4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7C60A84B-E0BC-491B-B6E6-76E658BB91EC"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:1.8.0:beta5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "035B04BC-C132-4CF6-9FE4-561A4104F392"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:1.8.0:rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E21DF0C9-16E4-44B0-8749-85F7F245A87A"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:1.8.0:rc2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AE6A2723-FAE7-4A87-A2A3-E94D9CC2DCB5"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:1.8.0:rc3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "37612FE6-C8B7-4925-81F5-ADB82A8F101E"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:1.8.0:rc4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "92181940-ED5C-442C-82BA-4F0F233FB11B"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:1.8.0:rc5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "28EEF1DB-00C6-4DFC-BB48-C4A308F60DAD"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:1.8.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "67CE3E94-341F-4D0C-937E-39B119925C9A"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:1.8.1:rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5C721635-2801-40E8-B5FE-734054D718D3"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:1.8.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "15ED9311-9E4E-4998-BD99-CDEB8E4F2C74"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:1.8.2:rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "815F7045-FC6D-4D57-A7AE-F63B0FC67251"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:1.8.3:rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "09918CFC-C6A0-45ED-91EA-A4D9295C6CBA"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:1.8.5:rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A7D38CAA-BECD-4FD7-8E42-72CB2B1DC699"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:1.8.5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4F211C14-8E50-4FB7-82EA-FE6975290DE1"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:1.8.6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0698EDFB-D156-4572-9008-0243FA6FD2FC"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:1.8.6.0:rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "16350161-9CF1-4AD3-954C-598D249CF962"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:1.8.6.0:rc2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "24EB6F7B-AD3C-42A2-B811-3CF3EEDD8438"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:1.8.6.0:rc3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7AC55C54-7AD7-49BE-A050-DC6878391208"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:1.8.7.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1B208EBB-0387-4223-A196-CE142E6B908B"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:1.8.7.0:rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "095BF874-0E0B-4F8F-8A11-ED096DD3A824"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:1.8.7.0:rc2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4067E71D-93A8-4B56-AE4A-FCB6E31577E6"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:1.8.8.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "779DEAC5-CBC7-4844-9A2E-97AEB49704EB"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:1.8.8.0:rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "913D2C84-B987-4DEE-8F9E-0FDF14BECE2E"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:1.8.8.0:rc2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "63889FD0-714B-4E02-8F34-00E4857A544A"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:1.8.8.0:rc3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A15B538D-DC9D-46B4-A455-341E8A2831E4"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:1.8.8.0:rc4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8FE32479-5D98-443F-8FA9-F6281726BDF9"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:1.8.8.0:rc5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "78841A3E-7D56-4737-9815-E1144FD0A44A"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:1.8.9.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CC295454-D897-425C-BFC8-91A72865A132"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:1.8.9.0:rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3830A3E2-09A1-487E-8EFA-27F8B4C61CB4"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:1.8.9.0:rc2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CAC942FB-83A2-4698-B410-F4C6AED0849A"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:1.8.9.0:rc3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "86ED40AD-0A52-4B4C-B4CA-F8D1A4CAF866"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:1.8.10.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "07FC62DE-74D3-42A9-94E8-6DCE62F3D2B6"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:1.8.10.0:rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "39E78E52-2AA4-42A5-9CE6-22DF2CF01704"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:1.8.10.0:rc2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3DF04D4C-DFED-4E71-BA0C-854823BB41CC"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:1.8.10.0:rc3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "518A8882-B1A6-408E-9B39-F01034A50190"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:1.8.10.0:rc4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2EBBB850-2AE6-4EC1-993F-AD7AF2E80008"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:1.8.11.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E1075D5D-5F81-4E26-90B0-60659B8D36B6"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:1.8.11.0:rc2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6880B042-11B1-430F-90A1-70F93FC5BAF2"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:1.8.11.0:rc3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0F074B06-6788-47AB-8C39-BA5E2E39ACC4"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:1.8.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1ACB7C4A-7CF7-4D57-B65D-741AFA6393EC"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:1.8.12.0:rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "85522E25-E76C-4CCF-AB7C-A74E1703D919"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:1.8.12.0:rc2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AC3BE912-0B42-416B-A0E2-B17FDF07BAAB"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:1.8.12.0:rc3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4FC9C2FB-A77B-4242-B4A1-92112E1C19B2"
},
{
"criteria": "cpe:2.3:a:sangoma:asterisk:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FB8D9B19-BD1E-4E1C-A1C3-6C64A6612233",
"versionEndIncluding": "1.8.12.0"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:asterisk:open_source:10.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "33DD2B8E-6AB1-45CD-85F5-E0F5234585BF"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:10.0.0:beta1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "52BDDAC0-5CEE-4054-8930-EAF25FE528FD"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:10.0.0:beta2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1CEB28DD-EAEA-45AF-8D7B-09E93AFABA49"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:10.0.0:rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "12BCF63F-DA77-48A1-861D-F6E710E3CA16"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:10.0.0:rc2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AD0D03FF-3FF6-40D0-A78E-CBDEA4FE4F14"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:10.0.0:rc3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "66666CD2-8921-4641-AD72-21F4386DC731"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:10.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0C549DD5-68F9-44FC-92B9-09A0E6F87315"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:10.1.0:rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "51407A8B-AF19-43FA-8D57-A6A35D465D1E"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:10.1.0:rc2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "911CCAF6-6E29-43B6-AF76-909016CD46ED"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:10.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7B46E218-9EFA-4224-BC5D-1A2F38559E38"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:10.2.0:rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6F1F43E8-6159-46FA-8BF5-360EA9D466BA"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:10.2.0:rc2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F75E0A69-9251-4CE1-9E83-188F0D35DEFC"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:10.2.0:rc3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "17E6BD3C-B88D-4C80-B77F-2A95767B9A71"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:10.2.0:rc4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3AC1C9EC-A84F-401B-BF59-F4938B6A2F59"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:10.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FCB76519-FD6D-4D74-8DF7-719822588C12"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:10.3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A6AB0DE5-0843-4A7A-A1C9-2FD7924FBEDC"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:10.3.0:rc2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "335F9C06-5E40-4E14-B018-15151E14414D"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:10.3.0:rc3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9E8F15FB-C6B5-4A4F-A7AD-E2BF0162D1DF"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:10.4.0:rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9DEA8945-9ACD-4CE7-A5E6-5207E16C663E"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:10.4.0:rc2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B2A7FC21-74FF-48BF-9BA8-A143FCB2BF3A"
},
{
"criteria": "cpe:2.3:a:asterisk:open_source:10.4.0:rc3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C4FCD6B4-ED33-424F-AD30-64227894B0B8"
},
{
"criteria": "cpe:2.3:a:sangoma:asterisk:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8E7D4883-79E3-4DD1-A555-136A0664E94E",
"versionEndIncluding": "10.4.0"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}