CVE-2003-0761: Digium Asterisk

High severity, CVSS 7.5. EPSS: 4% chance of exploitation in the next 30 days.

Buffer overflow in the get_msg_text of chan_sip.c in the Session Initiation Protocol (SIP) protocol implementation for Asterisk releases before August 15, 2003, allows remote attackers to execute arbitrary code via certain (1) MESSAGE or (2) INFO requests.

Affected products

• Digium Asterisk: version 1.2.13 only

Published 2003-09-17. Last modified 2026-06-16.