CVE-2012-5976: Digium Asterisk

Medium severity, CVSS 5.0. EPSS: 3% chance of exploitation in the next 30 days.

Multiple stack consumption vulnerabilities in Asterisk Open Source 1.8.x before 1.8.19.1, 10.x before 10.11.1, and 11.x before 11.1.2; Certified Asterisk 1.8.11 before 1.8.11-cert10; and Asterisk Digiumphones 10.x-digiumphones before 10.11.1-digiumphones allow remote attackers to cause a denial of service (daemon crash) via TCP data using the (1) SIP, (2) HTTP, or (3) XMPP protocol.

Affected products

• Digium Asterisk: up to and including 1.8.19.0; version 1.8.0 only; version 1.8.1 only; version 1.8.1.1 only; version 1.8.1.2 only; version 1.8.2 only; …
• Digium Certified Asterisk: version 1.8.11 only

Published 2013-01-04. Last modified 2026-06-16.