Read the docs
TI-2012-02559 Aliases CVE-2012-2948GHSA-chr5-w9ff-5gcw

chan_skinny.c in the Skinny (aka SCCP) channel driver in Certified Asterisk 1.8.11-cert…

Priority LOW 23CWE-399Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-399 and the CVSS impact.

Summary

chan_skinny.c in the Skinny (aka SCCP) channel driver in Certified Asterisk 1.8.11-cert before 1.8.11-cert2 and Asterisk Open Source 1.8.x before 1.8.12.1 and 10.x before 10.4.1 allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) by closing a connection in off-hook mode.

Why it matters now

EPSS 0.02119 81st percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 72

CPEVersionsRoleVendor
cpe:2.3:a:asterisk:certified_asterisk:1.8.11:cert:*:*:*:*:*:*1.8.11 certVulnerableasterisk
cpe:2.3:a:asterisk:certified_asterisk:1.8.11:cert1:*:*:*:*:*:*1.8.11 cert1Vulnerableasterisk
cpe:2.3:a:asterisk:open_source:1.8.0:*:*:*:*:*:*:*1.8.0Vulnerableasterisk
cpe:2.3:a:asterisk:open_source:1.8.0:beta1:*:*:*:*:*:*1.8.0 beta1Vulnerableasterisk
cpe:2.3:a:asterisk:open_source:1.8.0:beta2:*:*:*:*:*:*1.8.0 beta2Vulnerableasterisk
cpe:2.3:a:asterisk:open_source:1.8.0:beta3:*:*:*:*:*:*1.8.0 beta3Vulnerableasterisk
cpe:2.3:a:asterisk:open_source:1.8.0:beta4:*:*:*:*:*:*1.8.0 beta4Vulnerableasterisk
cpe:2.3:a:asterisk:open_source:1.8.0:beta5:*:*:*:*:*:*1.8.0 beta5Vulnerableasterisk
cpe:2.3:a:asterisk:open_source:1.8.0:rc1:*:*:*:*:*:*1.8.0 rc1Vulnerableasterisk
cpe:2.3:a:asterisk:open_source:1.8.0:rc2:*:*:*:*:*:*1.8.0 rc2Vulnerableasterisk
  • cpe:2.3:a:asterisk:certified_asterisk:1.8.11:cert:*:*:*:*:*:* Versions 1.8.11 cert Vulnerable ·asterisk
  • cpe:2.3:a:asterisk:certified_asterisk:1.8.11:cert1:*:*:*:*:*:* Versions 1.8.11 cert1 Vulnerable ·asterisk
  • cpe:2.3:a:asterisk:open_source:1.8.0:*:*:*:*:*:*:* Versions 1.8.0 Vulnerable ·asterisk
  • cpe:2.3:a:asterisk:open_source:1.8.0:beta1:*:*:*:*:*:* Versions 1.8.0 beta1 Vulnerable ·asterisk
  • cpe:2.3:a:asterisk:open_source:1.8.0:beta2:*:*:*:*:*:* Versions 1.8.0 beta2 Vulnerable ·asterisk
  • cpe:2.3:a:asterisk:open_source:1.8.0:beta3:*:*:*:*:*:* Versions 1.8.0 beta3 Vulnerable ·asterisk
  • cpe:2.3:a:asterisk:open_source:1.8.0:beta4:*:*:*:*:*:* Versions 1.8.0 beta4 Vulnerable ·asterisk
  • cpe:2.3:a:asterisk:open_source:1.8.0:beta5:*:*:*:*:*:* Versions 1.8.0 beta5 Vulnerable ·asterisk
  • cpe:2.3:a:asterisk:open_source:1.8.0:rc1:*:*:*:*:*:* Versions 1.8.0 rc1 Vulnerable ·asterisk
  • cpe:2.3:a:asterisk:open_source:1.8.0:rc2:*:*:*:*:*:* Versions 1.8.0 rc2 Vulnerable ·asterisk
Show 62 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:asterisk:open_source:1.8.0:rc3:*:*:*:*:*:*1.8.0 rc3Vulnerableasterisk
cpe:2.3:a:asterisk:open_source:1.8.0:rc4:*:*:*:*:*:*1.8.0 rc4Vulnerableasterisk
cpe:2.3:a:asterisk:open_source:1.8.0:rc5:*:*:*:*:*:*1.8.0 rc5Vulnerableasterisk
cpe:2.3:a:asterisk:open_source:1.8.1:*:*:*:*:*:*:*1.8.1Vulnerableasterisk
cpe:2.3:a:asterisk:open_source:1.8.1:rc1:*:*:*:*:*:*1.8.1 rc1Vulnerableasterisk
cpe:2.3:a:asterisk:open_source:1.8.2:*:*:*:*:*:*:*1.8.2Vulnerableasterisk
cpe:2.3:a:asterisk:open_source:1.8.2:rc1:*:*:*:*:*:*1.8.2 rc1Vulnerableasterisk
cpe:2.3:a:asterisk:open_source:1.8.3:rc1:*:*:*:*:*:*1.8.3 rc1Vulnerableasterisk
cpe:2.3:a:asterisk:open_source:1.8.5:rc1:*:*:*:*:*:*1.8.5 rc1Vulnerableasterisk
cpe:2.3:a:asterisk:open_source:1.8.5.0:*:*:*:*:*:*:*1.8.5.0Vulnerableasterisk
cpe:2.3:a:asterisk:open_source:1.8.6.0:*:*:*:*:*:*:*1.8.6.0Vulnerableasterisk
cpe:2.3:a:asterisk:open_source:1.8.6.0:rc1:*:*:*:*:*:*1.8.6.0 rc1Vulnerableasterisk
cpe:2.3:a:asterisk:open_source:1.8.6.0:rc2:*:*:*:*:*:*1.8.6.0 rc2Vulnerableasterisk
cpe:2.3:a:asterisk:open_source:1.8.6.0:rc3:*:*:*:*:*:*1.8.6.0 rc3Vulnerableasterisk
cpe:2.3:a:asterisk:open_source:1.8.7.0:*:*:*:*:*:*:*1.8.7.0Vulnerableasterisk
cpe:2.3:a:asterisk:open_source:1.8.7.0:rc1:*:*:*:*:*:*1.8.7.0 rc1Vulnerableasterisk
cpe:2.3:a:asterisk:open_source:1.8.7.0:rc2:*:*:*:*:*:*1.8.7.0 rc2Vulnerableasterisk
cpe:2.3:a:asterisk:open_source:1.8.8.0:*:*:*:*:*:*:*1.8.8.0Vulnerableasterisk
cpe:2.3:a:asterisk:open_source:1.8.8.0:rc1:*:*:*:*:*:*1.8.8.0 rc1Vulnerableasterisk
cpe:2.3:a:asterisk:open_source:1.8.8.0:rc2:*:*:*:*:*:*1.8.8.0 rc2Vulnerableasterisk
cpe:2.3:a:asterisk:open_source:1.8.8.0:rc3:*:*:*:*:*:*1.8.8.0 rc3Vulnerableasterisk
cpe:2.3:a:asterisk:open_source:1.8.8.0:rc4:*:*:*:*:*:*1.8.8.0 rc4Vulnerableasterisk
cpe:2.3:a:asterisk:open_source:1.8.8.0:rc5:*:*:*:*:*:*1.8.8.0 rc5Vulnerableasterisk
cpe:2.3:a:asterisk:open_source:1.8.9.0:*:*:*:*:*:*:*1.8.9.0Vulnerableasterisk
cpe:2.3:a:asterisk:open_source:1.8.9.0:rc1:*:*:*:*:*:*1.8.9.0 rc1Vulnerableasterisk
cpe:2.3:a:asterisk:open_source:1.8.9.0:rc2:*:*:*:*:*:*1.8.9.0 rc2Vulnerableasterisk
cpe:2.3:a:asterisk:open_source:1.8.9.0:rc3:*:*:*:*:*:*1.8.9.0 rc3Vulnerableasterisk
cpe:2.3:a:asterisk:open_source:1.8.10.0:*:*:*:*:*:*:*1.8.10.0Vulnerableasterisk
cpe:2.3:a:asterisk:open_source:1.8.10.0:rc1:*:*:*:*:*:*1.8.10.0 rc1Vulnerableasterisk
cpe:2.3:a:asterisk:open_source:1.8.10.0:rc2:*:*:*:*:*:*1.8.10.0 rc2Vulnerableasterisk
cpe:2.3:a:asterisk:open_source:1.8.10.0:rc3:*:*:*:*:*:*1.8.10.0 rc3Vulnerableasterisk
cpe:2.3:a:asterisk:open_source:1.8.10.0:rc4:*:*:*:*:*:*1.8.10.0 rc4Vulnerableasterisk
cpe:2.3:a:asterisk:open_source:1.8.11.0:*:*:*:*:*:*:*1.8.11.0Vulnerableasterisk
cpe:2.3:a:asterisk:open_source:1.8.11.0:rc2:*:*:*:*:*:*1.8.11.0 rc2Vulnerableasterisk
cpe:2.3:a:asterisk:open_source:1.8.11.0:rc3:*:*:*:*:*:*1.8.11.0 rc3Vulnerableasterisk
cpe:2.3:a:asterisk:open_source:1.8.12:*:*:*:*:*:*:*1.8.12Vulnerableasterisk
cpe:2.3:a:asterisk:open_source:1.8.12.0:rc1:*:*:*:*:*:*1.8.12.0 rc1Vulnerableasterisk
cpe:2.3:a:asterisk:open_source:1.8.12.0:rc2:*:*:*:*:*:*1.8.12.0 rc2Vulnerableasterisk
cpe:2.3:a:asterisk:open_source:1.8.12.0:rc3:*:*:*:*:*:*1.8.12.0 rc3Vulnerableasterisk
cpe:2.3:a:sangoma:asterisk:*:*:*:*:*:*:*:*up to 1.8.12.0VulnerableSangoma
cpe:2.3:a:asterisk:open_source:10.0.0:*:*:*:*:*:*:*10.0.0Vulnerableasterisk
cpe:2.3:a:asterisk:open_source:10.0.0:beta1:*:*:*:*:*:*10.0.0 beta1Vulnerableasterisk
cpe:2.3:a:asterisk:open_source:10.0.0:beta2:*:*:*:*:*:*10.0.0 beta2Vulnerableasterisk
cpe:2.3:a:asterisk:open_source:10.0.0:rc1:*:*:*:*:*:*10.0.0 rc1Vulnerableasterisk
cpe:2.3:a:asterisk:open_source:10.0.0:rc2:*:*:*:*:*:*10.0.0 rc2Vulnerableasterisk
cpe:2.3:a:asterisk:open_source:10.0.0:rc3:*:*:*:*:*:*10.0.0 rc3Vulnerableasterisk
cpe:2.3:a:asterisk:open_source:10.1.0:*:*:*:*:*:*:*10.1.0Vulnerableasterisk
cpe:2.3:a:asterisk:open_source:10.1.0:rc1:*:*:*:*:*:*10.1.0 rc1Vulnerableasterisk
cpe:2.3:a:asterisk:open_source:10.1.0:rc2:*:*:*:*:*:*10.1.0 rc2Vulnerableasterisk
cpe:2.3:a:asterisk:open_source:10.2.0:*:*:*:*:*:*:*10.2.0Vulnerableasterisk
cpe:2.3:a:asterisk:open_source:10.2.0:rc1:*:*:*:*:*:*10.2.0 rc1Vulnerableasterisk
cpe:2.3:a:asterisk:open_source:10.2.0:rc2:*:*:*:*:*:*10.2.0 rc2Vulnerableasterisk
cpe:2.3:a:asterisk:open_source:10.2.0:rc3:*:*:*:*:*:*10.2.0 rc3Vulnerableasterisk
cpe:2.3:a:asterisk:open_source:10.2.0:rc4:*:*:*:*:*:*10.2.0 rc4Vulnerableasterisk
cpe:2.3:a:asterisk:open_source:10.3:*:*:*:*:*:*:*10.3Vulnerableasterisk
cpe:2.3:a:asterisk:open_source:10.3.0:*:*:*:*:*:*:*10.3.0Vulnerableasterisk
cpe:2.3:a:asterisk:open_source:10.3.0:rc2:*:*:*:*:*:*10.3.0 rc2Vulnerableasterisk
cpe:2.3:a:asterisk:open_source:10.3.0:rc3:*:*:*:*:*:*10.3.0 rc3Vulnerableasterisk
cpe:2.3:a:asterisk:open_source:10.4.0:rc1:*:*:*:*:*:*10.4.0 rc1Vulnerableasterisk
cpe:2.3:a:asterisk:open_source:10.4.0:rc2:*:*:*:*:*:*10.4.0 rc2Vulnerableasterisk
cpe:2.3:a:asterisk:open_source:10.4.0:rc3:*:*:*:*:*:*10.4.0 rc3Vulnerableasterisk
cpe:2.3:a:sangoma:asterisk:*:*:*:*:*:*:*:*up to 10.4.0VulnerableSangoma
  • cpe:2.3:a:asterisk:open_source:1.8.0:rc3:*:*:*:*:*:* Versions 1.8.0 rc3 Vulnerable ·asterisk
  • cpe:2.3:a:asterisk:open_source:1.8.0:rc4:*:*:*:*:*:* Versions 1.8.0 rc4 Vulnerable ·asterisk
  • cpe:2.3:a:asterisk:open_source:1.8.0:rc5:*:*:*:*:*:* Versions 1.8.0 rc5 Vulnerable ·asterisk
  • cpe:2.3:a:asterisk:open_source:1.8.1:*:*:*:*:*:*:* Versions 1.8.1 Vulnerable ·asterisk
  • cpe:2.3:a:asterisk:open_source:1.8.1:rc1:*:*:*:*:*:* Versions 1.8.1 rc1 Vulnerable ·asterisk
  • cpe:2.3:a:asterisk:open_source:1.8.2:*:*:*:*:*:*:* Versions 1.8.2 Vulnerable ·asterisk
  • cpe:2.3:a:asterisk:open_source:1.8.2:rc1:*:*:*:*:*:* Versions 1.8.2 rc1 Vulnerable ·asterisk
  • cpe:2.3:a:asterisk:open_source:1.8.3:rc1:*:*:*:*:*:* Versions 1.8.3 rc1 Vulnerable ·asterisk
  • cpe:2.3:a:asterisk:open_source:1.8.5:rc1:*:*:*:*:*:* Versions 1.8.5 rc1 Vulnerable ·asterisk
  • cpe:2.3:a:asterisk:open_source:1.8.5.0:*:*:*:*:*:*:* Versions 1.8.5.0 Vulnerable ·asterisk
  • cpe:2.3:a:asterisk:open_source:1.8.6.0:*:*:*:*:*:*:* Versions 1.8.6.0 Vulnerable ·asterisk
  • cpe:2.3:a:asterisk:open_source:1.8.6.0:rc1:*:*:*:*:*:* Versions 1.8.6.0 rc1 Vulnerable ·asterisk
  • cpe:2.3:a:asterisk:open_source:1.8.6.0:rc2:*:*:*:*:*:* Versions 1.8.6.0 rc2 Vulnerable ·asterisk
  • cpe:2.3:a:asterisk:open_source:1.8.6.0:rc3:*:*:*:*:*:* Versions 1.8.6.0 rc3 Vulnerable ·asterisk
  • cpe:2.3:a:asterisk:open_source:1.8.7.0:*:*:*:*:*:*:* Versions 1.8.7.0 Vulnerable ·asterisk
  • cpe:2.3:a:asterisk:open_source:1.8.7.0:rc1:*:*:*:*:*:* Versions 1.8.7.0 rc1 Vulnerable ·asterisk
  • cpe:2.3:a:asterisk:open_source:1.8.7.0:rc2:*:*:*:*:*:* Versions 1.8.7.0 rc2 Vulnerable ·asterisk
  • cpe:2.3:a:asterisk:open_source:1.8.8.0:*:*:*:*:*:*:* Versions 1.8.8.0 Vulnerable ·asterisk
  • cpe:2.3:a:asterisk:open_source:1.8.8.0:rc1:*:*:*:*:*:* Versions 1.8.8.0 rc1 Vulnerable ·asterisk
  • cpe:2.3:a:asterisk:open_source:1.8.8.0:rc2:*:*:*:*:*:* Versions 1.8.8.0 rc2 Vulnerable ·asterisk
  • cpe:2.3:a:asterisk:open_source:1.8.8.0:rc3:*:*:*:*:*:* Versions 1.8.8.0 rc3 Vulnerable ·asterisk
  • cpe:2.3:a:asterisk:open_source:1.8.8.0:rc4:*:*:*:*:*:* Versions 1.8.8.0 rc4 Vulnerable ·asterisk
  • cpe:2.3:a:asterisk:open_source:1.8.8.0:rc5:*:*:*:*:*:* Versions 1.8.8.0 rc5 Vulnerable ·asterisk
  • cpe:2.3:a:asterisk:open_source:1.8.9.0:*:*:*:*:*:*:* Versions 1.8.9.0 Vulnerable ·asterisk
  • cpe:2.3:a:asterisk:open_source:1.8.9.0:rc1:*:*:*:*:*:* Versions 1.8.9.0 rc1 Vulnerable ·asterisk
  • cpe:2.3:a:asterisk:open_source:1.8.9.0:rc2:*:*:*:*:*:* Versions 1.8.9.0 rc2 Vulnerable ·asterisk
  • cpe:2.3:a:asterisk:open_source:1.8.9.0:rc3:*:*:*:*:*:* Versions 1.8.9.0 rc3 Vulnerable ·asterisk
  • cpe:2.3:a:asterisk:open_source:1.8.10.0:*:*:*:*:*:*:* Versions 1.8.10.0 Vulnerable ·asterisk
  • cpe:2.3:a:asterisk:open_source:1.8.10.0:rc1:*:*:*:*:*:* Versions 1.8.10.0 rc1 Vulnerable ·asterisk
  • cpe:2.3:a:asterisk:open_source:1.8.10.0:rc2:*:*:*:*:*:* Versions 1.8.10.0 rc2 Vulnerable ·asterisk
  • cpe:2.3:a:asterisk:open_source:1.8.10.0:rc3:*:*:*:*:*:* Versions 1.8.10.0 rc3 Vulnerable ·asterisk
  • cpe:2.3:a:asterisk:open_source:1.8.10.0:rc4:*:*:*:*:*:* Versions 1.8.10.0 rc4 Vulnerable ·asterisk
  • cpe:2.3:a:asterisk:open_source:1.8.11.0:*:*:*:*:*:*:* Versions 1.8.11.0 Vulnerable ·asterisk
  • cpe:2.3:a:asterisk:open_source:1.8.11.0:rc2:*:*:*:*:*:* Versions 1.8.11.0 rc2 Vulnerable ·asterisk
  • cpe:2.3:a:asterisk:open_source:1.8.11.0:rc3:*:*:*:*:*:* Versions 1.8.11.0 rc3 Vulnerable ·asterisk
  • cpe:2.3:a:asterisk:open_source:1.8.12:*:*:*:*:*:*:* Versions 1.8.12 Vulnerable ·asterisk
  • cpe:2.3:a:asterisk:open_source:1.8.12.0:rc1:*:*:*:*:*:* Versions 1.8.12.0 rc1 Vulnerable ·asterisk
  • cpe:2.3:a:asterisk:open_source:1.8.12.0:rc2:*:*:*:*:*:* Versions 1.8.12.0 rc2 Vulnerable ·asterisk
  • cpe:2.3:a:asterisk:open_source:1.8.12.0:rc3:*:*:*:*:*:* Versions 1.8.12.0 rc3 Vulnerable ·asterisk
  • cpe:2.3:a:sangoma:asterisk:*:*:*:*:*:*:*:* Versions up to 1.8.12.0 Vulnerable ·Sangoma
  • cpe:2.3:a:asterisk:open_source:10.0.0:*:*:*:*:*:*:* Versions 10.0.0 Vulnerable ·asterisk
  • cpe:2.3:a:asterisk:open_source:10.0.0:beta1:*:*:*:*:*:* Versions 10.0.0 beta1 Vulnerable ·asterisk
  • cpe:2.3:a:asterisk:open_source:10.0.0:beta2:*:*:*:*:*:* Versions 10.0.0 beta2 Vulnerable ·asterisk
  • cpe:2.3:a:asterisk:open_source:10.0.0:rc1:*:*:*:*:*:* Versions 10.0.0 rc1 Vulnerable ·asterisk
  • cpe:2.3:a:asterisk:open_source:10.0.0:rc2:*:*:*:*:*:* Versions 10.0.0 rc2 Vulnerable ·asterisk
  • cpe:2.3:a:asterisk:open_source:10.0.0:rc3:*:*:*:*:*:* Versions 10.0.0 rc3 Vulnerable ·asterisk
  • cpe:2.3:a:asterisk:open_source:10.1.0:*:*:*:*:*:*:* Versions 10.1.0 Vulnerable ·asterisk
  • cpe:2.3:a:asterisk:open_source:10.1.0:rc1:*:*:*:*:*:* Versions 10.1.0 rc1 Vulnerable ·asterisk
  • cpe:2.3:a:asterisk:open_source:10.1.0:rc2:*:*:*:*:*:* Versions 10.1.0 rc2 Vulnerable ·asterisk
  • cpe:2.3:a:asterisk:open_source:10.2.0:*:*:*:*:*:*:* Versions 10.2.0 Vulnerable ·asterisk
  • cpe:2.3:a:asterisk:open_source:10.2.0:rc1:*:*:*:*:*:* Versions 10.2.0 rc1 Vulnerable ·asterisk
  • cpe:2.3:a:asterisk:open_source:10.2.0:rc2:*:*:*:*:*:* Versions 10.2.0 rc2 Vulnerable ·asterisk
  • cpe:2.3:a:asterisk:open_source:10.2.0:rc3:*:*:*:*:*:* Versions 10.2.0 rc3 Vulnerable ·asterisk
  • cpe:2.3:a:asterisk:open_source:10.2.0:rc4:*:*:*:*:*:* Versions 10.2.0 rc4 Vulnerable ·asterisk
  • cpe:2.3:a:asterisk:open_source:10.3:*:*:*:*:*:*:* Versions 10.3 Vulnerable ·asterisk
  • cpe:2.3:a:asterisk:open_source:10.3.0:*:*:*:*:*:*:* Versions 10.3.0 Vulnerable ·asterisk
  • cpe:2.3:a:asterisk:open_source:10.3.0:rc2:*:*:*:*:*:* Versions 10.3.0 rc2 Vulnerable ·asterisk
  • cpe:2.3:a:asterisk:open_source:10.3.0:rc3:*:*:*:*:*:* Versions 10.3.0 rc3 Vulnerable ·asterisk
  • cpe:2.3:a:asterisk:open_source:10.4.0:rc1:*:*:*:*:*:* Versions 10.4.0 rc1 Vulnerable ·asterisk
  • cpe:2.3:a:asterisk:open_source:10.4.0:rc2:*:*:*:*:*:* Versions 10.4.0 rc2 Vulnerable ·asterisk
  • cpe:2.3:a:asterisk:open_source:10.4.0:rc3:*:*:*:*:*:* Versions 10.4.0 rc3 Vulnerable ·asterisk
  • cpe:2.3:a:sangoma:asterisk:*:*:*:*:*:*:*:* Versions up to 10.4.0 Vulnerable ·Sangoma

Remediation

No fixed version listed by the sources yet.

Vendor assessments

Red Hat

Red Hat's page for this CVE →

Not affected: 1 product
  • Red Hat

Timeline

  1. 2026-10-02 Threatist record created from CVE-2012-2948
  2. 2026-10-03 Alias added: GHSA-chr5-w9ff-5gcw

References

Advisory 1

Other 2

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences