Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-58np-gsxj-8yc4
Vulnerability ID VCID-58np-gsxj-8yc4
Aliases CVE-2007-4455
Summary The SIP channel driver (chan_sip) in Asterisk Open Source 1.4.x before 1.4.11, AsteriskNOW before beta7, Asterisk Appliance Developer Kit 0.x before 0.8.0, and s800i (Asterisk Appliance) 1.x before 1.0.3 allows remote attackers to cause a denial of service (memory exhaustion) via a SIP dialog that causes a large number of history entries to be created.
Status Published
Exploitability 0.5
Weighted Severity 0.0
Risk None
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.05038 https://api.first.org/data/v1/epss?cve=CVE-2007-4455
epss 0.05038 https://api.first.org/data/v1/epss?cve=CVE-2007-4455
epss 0.05038 https://api.first.org/data/v1/epss?cve=CVE-2007-4455
epss 0.05038 https://api.first.org/data/v1/epss?cve=CVE-2007-4455
epss 0.05038 https://api.first.org/data/v1/epss?cve=CVE-2007-4455
epss 0.05038 https://api.first.org/data/v1/epss?cve=CVE-2007-4455
epss 0.05232 https://api.first.org/data/v1/epss?cve=CVE-2007-4455
epss 0.05232 https://api.first.org/data/v1/epss?cve=CVE-2007-4455
epss 0.05232 https://api.first.org/data/v1/epss?cve=CVE-2007-4455
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2007-4455
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4455
No exploits are available.
There are no known vectors.
Exploit Prediction Scoring System (EPSS)
Percentile 0.89712
EPSS Score 0.05038
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T16:30:21.346952+00:00 Debian Oval Importer Import https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.0.0