CVE-2016-2232

—

CVSS 3.0

6.5 medium

EPSS

5%p92

Published

Feb 22, 2016 (Feb 22, 2016)

Modified

Jun 17, 2026

Description

Asterisk Open Source 1.8.x, 11.x before 11.21.1, 12.x, and 13.x before 13.7.1 and Certified Asterisk 1.8.28, 11.6 before 11.6-cert12, and 13.1 before 13.1-cert3 allow remote authenticated users to cause a denial of service (uninitialized pointer dereference and crash) via a zero length error correcting redundancy packet for a UDPTL FAX packet that is lost.

Vendors: digium
Products: asterisk, certified asterisk
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (5.1%)

In the news0 stories

No ingested article mentions this CVE yet.