CVE-2007-4280 — The Skinny channel driver (chan_skinny) in Asterisk Open Source before 1.4.10, AsteriskNOW before beta7, Appliance Developer Kit before 0.7.0, and Appliance s800i before 1.0.3 allows remote authenticated users to cause a denial of service (application crash) via a CAPABILITIES_RES_MESSAGE packet with a capabilities count larger than the capabilities_res_message array population

Back Back to CVE browser

LOW

The Skinny channel driver (chan_skinny) in Asterisk Open Source before 1.4.10, AsteriskNOW before beta7, Appliance Developer Kit before 0.7.0, and Appliance s800i before 1.0.3 allows remote authenticated users to cause a denial of service (application crash) via a CAPABILITIES_RES_MESSAGE packet with a capabilities count larger than the capabilities_res_message array population

Published Aug 9, 2007

3.5

LOW

CVSS 2.0

EPSS 1.15%

Description

The Skinny channel driver (chan_skinny) in Asterisk Open Source before 1.4.10, AsteriskNOW before beta7, Appliance Developer Kit before 0.7.0, and Appliance s800i before 1.0.3 allows remote authenticated users to cause a denial of service (application crash) via a CAPABILITIES_RES_MESSAGE packet with a capabilities count larger than the capabilities_res_message array population.

Affected products

Remediation

No remediation recorded yet.

Metrics

1.15% 0.01149

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.01149

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (15 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	1.15% (0.01149)	65.67th	v5 (v2026.06.15)
Jun 15, 2026	1.15% (0.01149)	62.59th	v5 (v2026.06.15)
Mar 30, 2025	2.82% (0.02818)	84.89th	v4 (v2025.03.14)
Mar 29, 2025	4.12% (0.04122)	80.71th	v4 (v2025.03.14)
Mar 17, 2025	2.82% (0.02818)	85.22th	v4 (v2025.03.14)
Dec 12, 2024	93.69% (0.93694)	99.23th	v3 (v2023.03.01)
Jul 20, 2024	93.69% (0.93694)	99.15th	v3 (v2023.03.01)
Jun 12, 2024	95.22% (0.95219)	99.35th	v3 (v2023.03.01)
May 5, 2024	95.26% (0.95263)	99.33th	v3 (v2023.03.01)
Mar 28, 2024	95.36% (0.95355)	99.31th	v3 (v2023.03.01)
Aug 15, 2023	95.98% (0.95981)	99.23th	v3 (v2023.03.01)
Mar 7, 2023	95.90% (0.95899)	99.05th	v3 (v2023.03.01)
Mar 6, 2023	2.43% (0.02428)	81.57th	v2 (v2022.01.01)
Apr 1, 2022	2.43% (0.02428)	79.82th	v2 (v2022.01.01)
Feb 4, 2022	2.43% (0.02428)	58.43th	v2 (v2022.01.01)

Weaknesses (0)

No CWE recorded.

References (6)

http://downloads.digium.com/pub/asa/ASA-2007-019.pdf
x_refsource_CONFIRMPatch
http://secunia.com/advisories/26340
third-party-advisoryx_refsource_SECUNIAPatchVendor Advisory
http://www.securityfocus.com/bid/25228
vdb-entryx_refsource_BIDPatch
http://www.securitytracker.com/id?1018536
vdb-entryx_refsource_SECTRACK
http://www.vupen.com/english/advisories/2007/2808
vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/35870
vdb-entryx_refsource_XF

Link	Providers	Tags
http://downloads.digium.com/pub/asa/ASA-2007-019.pdf		x_refsource_CONFIRMPatch
http://secunia.com/advisories/26340		third-party-advisoryx_refsource_SECUNIAPatchVendor Advisory
http://www.securityfocus.com/bid/25228		vdb-entryx_refsource_BIDPatch
http://www.securitytracker.com/id?1018536		vdb-entryx_refsource_SECTRACK
http://www.vupen.com/english/advisories/2007/2808		vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/35870		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Aug 9, 2007

Updated Aug 7, 2024

Reserved Aug 9, 2007

Link CVE-2007-4280

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2007-4280

Red Hat

Severity n/a

Public date n/a

Links CVE-2007-4280