CVE-2012-1184

CVE-2012-1184 describes a stack-based buffer overflow in the ast_parse_digest function of Asterisk versions 1.8.x before 1.8.10.1 and 10.x before 10.2.1. This vulnerability allows remote attackers to trigger a denial of service or potentially execute arbitrary code by sending a crafted, long string within an HTTP Digest Authentication header. With a CVSS score of 7.5, this high-severity flaw is easily exploitable over the network without authentication, leading to potential compromise of confidentiality, integrity, and availability. While not listed on the KEV catalog, a proof-of-concept exploit is publicly available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.