Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-4278-jnsa-byd6
Vulnerability ID VCID-4278-jnsa-byd6
Aliases CVE-2007-1561
Summary The channel driver in Asterisk before 1.2.17 and 1.4.x before 1.4.2 allows remote attackers to cause a denial of service (crash) via a SIP INVITE message with an SDP containing one valid and one invalid IP address.
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.20671 https://api.first.org/data/v1/epss?cve=CVE-2007-1561
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2007-1561
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1561
415466 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=415466
GLSA-200704-01 https://security.gentoo.org/glsa/200704-01
OSVDB-34479;CVE-2007-1561 Exploit https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/dos/3566.pl
Data source Exploit-DB
Date added March 24, 2007
Description Asterisk 1.2.16/1.4.1 - SIP INVITE Remote Denial of Service
Ransomware campaign use Known
Source publication date March 25, 2007
Exploit type dos
Platform multiple
There are no known vectors.
Exploit Prediction Scoring System (EPSS)
Percentile 0.95688
EPSS Score 0.20671
Published At May 29, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-05-29T13:40:47.898319+00:00 Debian Oval Importer Import https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.6.0