CVE-2007-4280: Asterisk

Low severity, CVSS 3.5. EPSS: 1.1% chance of exploitation in the next 30 days.

The Skinny channel driver (chan_skinny) in Asterisk Open Source before 1.4.10, AsteriskNOW before beta7, Appliance Developer Kit before 0.7.0, and Appliance s800i before 1.0.3 allows remote authenticated users to cause a denial of service (application crash) via a CAPABILITIES_RES_MESSAGE packet with a capabilities count larger than the capabilities_res_message array population.

Affected products

• Asterisk Asterisk: up to and including 1.4.9
• Asterisk Asterisk Appliance Developer Kit: up to and including 0.6.0
• Asterisk Asterisknow: up to and including beta_6
• Asterisk s800i: up to and including 1.0.2

Published 2007-08-09. Last modified 2026-06-16.