CVE-2007-1693

N/A Unknown
Published: May 17, 2007 Modified: April 23, 2026
View on NVD

Description

The SIP channel module in Yet Another Telephony Engine (Yate) before 1.2.0 sets the caller_info_uri parameter using an incorrect variable that can be NULL, which allows remote attackers to cause a denial of service (NULL dereference and application crash) via a Call-Info header without a purpose parameter.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://securityreason.com/securityalert/2716
Source: cve@mitre.org
Exploit Third Party Advisory
http://voip.null.ro/cgi-bin/cvsweb.cgi/yate/modules/ysipchan.cpp
Source: cve@mitre.org
Issue Tracking Third Party Advisory
http://www.securityfocus.com/archive/1/467289/100/200/threaded
Source: cve@mitre.org
Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/23746
Source: cve@mitre.org
Third Party Advisory VDB Entry
http://securityreason.com/securityalert/2716
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit Third Party Advisory
http://voip.null.ro/cgi-bin/cvsweb.cgi/yate/modules/ysipchan.cpp
Source: af854a3a-2127-422b-91ae-364da2661108
Issue Tracking Third Party Advisory
http://www.securityfocus.com/archive/1/467289/100/200/threaded
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/23746
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory VDB Entry

8 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
1.4%
81th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

CWE-20

Affected Vendors

yate

Related CVEs

CVE-2026-46719 N/A
CVE-2025-4202 4.3
CVE-2026-8657 8.2
CVE-2026-8656 6.1
CVE-2026-8681 5.3