CVE-2012-5976

Multiple stack consumption vulnerabilities in Asterisk Open Source 1.8.x before 1.8.19.1, 10.x...

5.0 MediumFix available

CVE-2012-5976 is a medium vulnerability (CVSS 5.0) in Digium Asterisk, published January 4, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.03%, the 87th percentile. Fixed in asterisk 1:1.8.13.1~dfsg-2.

Multiple stack consumption vulnerabilities in Asterisk Open Source 1.8.x before 1.8.19.1, 10.x before 10.11.1, and 11.x before 11.1.2; Certified Asterisk 1.8.11 before 1.8.11-cert10; and Asterisk Digiumphones 10.x-digiumphones before 10.11.1-digiumphones allow remote attackers to cause a denial of service (daemon crash) via TCP data using the (1) SIP, (2) HTTP, or (3) XMPP protocol.

Exploit likelihood

3.03%Up 2.0 points since Feb 4, 2022

What each source reports

NVD Score used 5.0

Record: CVE-2012-5976
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness: CWE-119
Updated: 2026-11-02

CVE List No score

Record: CVE-2012-5976
Updated: 2026-11-02

EUVDEUVD-2012-5850 No score

Record: EUVD-2012-5850
Updated: 2026-11-03

GitHub AdvisoriesGHSA-3g3q-h95m-9mp2 No score

Multiple stack consumption vulnerabilities in Asterisk Open Source 1.8.x before 1.8.19.1, 10.x...

Record: GHSA-3g3q-h95m-9mp2
Weakness: CWE-119
Updated: 2026-11-02

OSV No score

Record: CVE-2012-5976
Updated: 2026-11-02

OSVDEBIAN-CVE-2012-5976 No score

Record: DEBIAN-CVE-2012-5976
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`asterisk` Debian:14	before 1:1.8.13.1~dfsg-2, plus listed versions 0.1.11-30.1.11-3woody11:1.0.5-21:1.0.5-41:1.0.6-1 Show 45 moreShow less 1:1.0.6-21:1.0.7-11:1.0.7.dfsg.1-11:1.0.7.dfsg.1-21:1.0.7.dfsg.1-2sarge11:1.0.7.dfsg.1-2sarge21:1.0.7.dfsg.1-2sarge31:1.0.7.dfsg.1-2sarge41:1.0.7.dfsg.1-2sarge51:1.0.7.dfsg.1-2sarge61:1.0.9.dfsg-11:1.0.9.dfsg-31:1.0.9.dfsg-41:1.0.9.dfsg-51:1.0.9.dfsg-61:1.2.0-beta1.dfsg-11:1.2.0-beta2.dfsg-11:1.2.0-beta2.dfsg-21:1.2.0-beta2.dfsg-31:1.2.0-rc1.dfsg-11:1.2.0-rc2.dfsg-11:1.2.0.dfsg-11:1.2.0.dfsg-21:1.2.0.dfsg-31:1.2.0.dfsg-41:1.2.0.dfsg-51:1.2.0.dfsg-61:1.2.1.dfsg-11:1.2.1.dfsg-21:1.2.1.dfsg-31:1.2.10.dfsg-11:1.2.10.dfsg-1bpo11:1.2.10.dfsg-21:1.2.10.dfsg-31:1.2.11.dfsg-11:1.2.12.1.dfsg-11:1.2.13~dfsg-11:1.2.13~dfsg-21:1.2.13~dfsg-2etch11:1.2.13~dfsg-2etch21:1.2.13~dfsg-2etch31:1.2.13~dfsg-2etch41:1.2.14~dfsg-11:1.2.14~dfsg-21:1.2.14~dfsg-3	1:1.8.13.1~dfsg-2
`asterisk` Debian:6.0	before 1:1.6.2.9-2+squeeze9, plus listed versions 1:1.6.2.9-21:1.6.2.9-2+squeeze11:1.6.2.9-2+squeeze21:1.6.2.9-2+squeeze31:1.6.2.9-2+squeeze4 Show 4 moreShow less 1:1.6.2.9-2+squeeze51:1.6.2.9-2+squeeze61:1.6.2.9-2+squeeze71:1.6.2.9-2+squeeze8	1:1.6.2.9-2+squeeze9

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD, OSV

References

This page doesn't list everything

Left out here: 104 versions. The JSON record has them.