CVE-2012-2948 - CVE House
Back to Database
Status published Medium CVE-2012-2948

chan_skinny.c in the Skinny (aka SCCP) channel driver in Certified...

Vulnerability Description

chan_skinny.c in the Skinny (aka SCCP) channel driver in Certified Asterisk 1.8.11-cert before 1.8.11-cert2 and Asterisk Open Source 1.8.x before 1.8.12.1 and 10.x before 10.4.1 allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) by closing a connection in off-hook mode.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2012-2948

Credits & Attribution

No credits recorded in the NVD database.

References

More from asterisk

View All →
CVE-2025-57767
Asterisk can crash from a specifically malformed Authorization header in an incoming SIP request
High 7.5
CVE-2025-54995
Asterisk remotely exploitable leak of RTP UDP ports and internal resources
Medium 6.5
CVE-2025-49832
Asterisk is Vulnerable to Remote DoS and possible RCE Attacks During Memory Allocation
Medium 6.5
CVE-2025-47780
cli_permissions.conf: deny option does not work for disallowing shell commands
Medium 4.8
CVE-2025-47779
Using malformed From header can forge identity with ";" or NULL in name portion
High 7.7

Affected Vendor

Affected Software

certified asterisk, open source, asterisk
Vulnerable Versions:
1.8.11, 1.8.0, 1.8.1, 1.8.2, 1.8.3, 1.8.5, 1.8.5.0, 1.8.6.0, 1.8.7.0, 1.8.8.0, 1.8.9.0, 1.8.10.0, 1.8.11.0, 1.8.12, 1.8.12.0, 10.0.0, 10.1.0, 10.2.0, 10.3, 10.3.0, 10.4.0, 0

Timeline

Official Publish: June 2nd, 2012
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.