VULNERABILITY INTELLIGENCE

CVE-2012-3553

CVSS score4 MEDIUM

EPSS probability1.73%

CISA KEVNot currently listed

Published2012-06-19

Last modified2026-06-16

Description

chan_skinny.c in the Skinny (aka SCCP) channel driver in Asterisk Open Source 10.x before 10.5.1 allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) by sending a Station Key Pad Button message and closing a connection in off-hook mode, a related issue to CVE-2012-2948.