Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-srpf-1fvf-e7da
Summarymain/http.c in the HTTP server in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x before 10.12.2, and 11.x before 11.2.2; Certified Asterisk 1.8.15 before 1.8.15-cert2; and Asterisk Digiumphones 10.x-digiumphones before 10.12.2-digiumphones does not properly restrict Content-Length values, which allows remote attackers to conduct stack-consumption attacks and cause a denial of service (daemon crash) via a crafted HTTP POST request. NOTE: this vulnerability exists because of an incorrect fix for CVE-2012-5976.
Aliases
0
alias CVE-2013-2686
Fixed_packages
0
url pkg:deb/debian/asterisk@1:1.8.13.1~dfsg-2?distro=sid
purl pkg:deb/debian/asterisk@1:1.8.13.1~dfsg-2?distro=sid
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/asterisk@1:1.8.13.1~dfsg-2%3Fdistro=sid
1
url pkg:deb/debian/asterisk@1:16.28.0~dfsg-0%2Bdeb11u4?distro=sid
purl pkg:deb/debian/asterisk@1:16.28.0~dfsg-0%2Bdeb11u4?distro=sid
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gh5j-yza2-v3fu
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/asterisk@1:16.28.0~dfsg-0%252Bdeb11u4%3Fdistro=sid
2
url pkg:deb/debian/asterisk@1:22.9.0%2Bdfsg%2B~cs6.16.60671434-1?distro=sid
purl pkg:deb/debian/asterisk@1:22.9.0%2Bdfsg%2B~cs6.16.60671434-1?distro=sid
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/asterisk@1:22.9.0%252Bdfsg%252B~cs6.16.60671434-1%3Fdistro=sid
3
url pkg:ebuild/net-misc/asterisk@11.7.0
purl pkg:ebuild/net-misc/asterisk@11.7.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/net-misc/asterisk@11.7.0
Affected_packages
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2013-2686
reference_id
reference_type
scores
0
value 0.02448
scoring_system epss
scoring_elements 0.85441
published_at 2026-05-29T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2013-2686
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2686
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2686
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=704114
reference_id 704114
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=704114
3
reference_url https://security.gentoo.org/glsa/201401-15
reference_id GLSA-201401-15
reference_type
scores
url https://security.gentoo.org/glsa/201401-15
Weaknesses
Exploits
Severity_range_scorenull
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-srpf-1fvf-e7da