CVE-2007-1594: Asterisk

High severity, CVSS 7.8. EPSS: 2.6% chance of exploitation in the next 30 days.

The handle_response function in chan_sip.c in Asterisk before 1.2.17 and 1.4.x before 1.4.2 allows remote attackers to cause a denial of service (crash) via a SIP Response code 0 in a SIP packet.

Affected products

• Asterisk Asterisk: version 0.1.7 only; version 0.1.8 only; version 0.1.9 only; version 0.1.9_1 only; version 0.1.11 only; version 0.2 only; …

Published 2007-03-22. Last modified 2026-06-16.