CVE-2009-0871

The SIP channel driver in Asterisk Open Source 1.4.22, 1.4.23, and 1.4.23.1; 1.6.0 before 1.6.0.6; 1.6.1 before 1.6.1.0-rc2; and Asterisk Business Edition C.2.3, with the pedantic option enabled, allows remote authenticated users to cause a denial of service (crash) via a SIP INVITE request without any headers, which triggers a NULL pointer dereference in the (1) sip_uri_headers_cmp and (2) sip_uri_params_cmp functions.

• CWE-20

• http://bugs.digium.com/view.php?id=13547
• http://bugs.digium.com/view.php?id=14417
• http://downloads.digium.com/pub/security/AST-2009-002.htmlPatch, Vendor Advisory
• http://osvdb.org/52568
• http://secunia.com/advisories/34229Vendor Advisory
• http://www.securityfocus.com/archive/1/501656/100/0/threaded
• http://www.securityfocus.com/bid/34070Patch
• http://www.securitytracker.com/id?1021834
• http://www.vupen.com/english/advisories/2009/0667
• http://bugs.digium.com/view.php?id=13547
• http://bugs.digium.com/view.php?id=14417
• http://downloads.digium.com/pub/security/AST-2009-002.htmlPatch, Vendor Advisory
• http://osvdb.org/52568
• http://secunia.com/advisories/34229Vendor Advisory
• http://www.securityfocus.com/archive/1/501656/100/0/threaded
• http://www.securityfocus.com/bid/34070Patch
• http://www.securitytracker.com/id?1021834
• http://www.vupen.com/english/advisories/2009/0667

Published

Mar 11, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-0865Directory traversal vulnerability in the SnapShotToFile meth…
• CVE-2009-0866pHNews Alpha 1 stores sensitive information under the web ro…
• CVE-2009-0867The HRM-S service in Fujitsu Enhanced Support Facility 3.0 a…
• CVE-2009-0868CRLF injection vulnerability in the WebLink template in Fuji…
• CVE-2009-0869Buffer overflow in the client in IBM Tivoli Storage Manager …
• CVE-2009-0870The NFSv4 Server module in the kernel in Sun Solaris 10, and…
• CVE-2009-0872The NFS server in Sun Solaris 10, and OpenSolaris before snv…
• CVE-2009-0873The NFS daemon (aka nfsd) in Sun Solaris 10 and OpenSolaris …
• CVE-2009-0874Multiple unspecified vulnerabilities in the Doors subsystem …
• CVE-2009-0875Race condition in the Doors subsystem in the kernel in Sun S…
• CVE-2009-0876Sun xVM VirtualBox 2.0.0, 2.0.2, 2.0.4, 2.0.6r39760, 2.1.0, …
• CVE-2009-0877Multiple cross-site scripting (XSS) vulnerabilities in Sun J…