CVE-2009-2726

The SIP channel driver in Asterisk Open Source 1.2.x before 1.2.34, 1.4.x before 1.4.26.1, 1.6.0.x before 1.6.0.12, and 1.6.1.x before 1.6.1.4; Asterisk Business Edition A.x.x, B.x.x before B.2.5.9, C.2.x before C.2.4.1, and C.3.x before C.3.1; and Asterisk Appliance s800i 1.2.x before 1.3.0.3 does not use a maximum width when invoking sscanf style functions, which allows remote attackers to cause a denial of service (stack memory consumption) via SIP packets containing large sequences of ASCII decimal characters, as demonstrated via vectors related to (1) the CSeq value in a SIP header, (2) large Content-Length value, and (3) SDP.

• CWE-770

• http://downloads.digium.com/pub/security/AST-2009-005.htmlProduct
• http://labs.mudynamics.com/advisories/MU-200908-01.txtBroken Link
• http://secunia.com/advisories/36227Broken Link, Vendor Advisory
• http://www.securityfocus.com/archive/1/505669/100/0/threadedBroken Link, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/36015Broken Link, Exploit, Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1022705Broken Link, Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2009/2229Broken Link, Vendor Advisory
• http://downloads.digium.com/pub/security/AST-2009-005.htmlProduct
• http://labs.mudynamics.com/advisories/MU-200908-01.txtBroken Link
• http://secunia.com/advisories/36227Broken Link, Vendor Advisory
• http://www.securityfocus.com/archive/1/505669/100/0/threadedBroken Link, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/36015Broken Link, Exploit, Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1022705Broken Link, Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2009/2229Broken Link, Vendor Advisory

Published

Aug 12, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-2719The Java Web Start implementation in Sun Java SE 6 before Up…
• CVE-2009-2720Unspecified vulnerability in the javax.swing.plaf.synth.Synt…
• CVE-2009-2721Multiple unspecified vulnerabilities in the Provider class i…
• CVE-2009-2722Multiple unspecified vulnerabilities in the Provider class i…
• CVE-2009-2723Unspecified vulnerability in deserialization in the Provider…
• CVE-2009-2724Race condition in the java.lang package in Sun Java SE 5.0 b…
• CVE-2009-2727Stack-based buffer overflow in the _tt_internal_realpath fun…
• CVE-2009-2730libgnutls in GnuTLS before 2.8.2 does not properly handle a …
• CVE-2009-2732The checkHTTPpassword function in http.c in ntop 3.3.10 and …
• CVE-2009-2733Multiple cross-site scripting (XSS) vulnerabilities in Achie…
• CVE-2009-2734SQL injection vulnerability in the get_employee function in …
• CVE-2009-2735SQL injection vulnerability in admin.php in sun-jester OpenN…