CVE-2012-3863

CVE-2012-3863 is a denial-of-service vulnerability affecting Asterisk Open Source, Business Edition, Certified Asterisk, and Digiumphones versions. It stems from improper handling of provisional responses to SIP reINVITE requests, leading to RTP port exhaustion. The vulnerability has a CVSS score of 4.0, indicating a medium severity, and requires authentication for exploitation, with a network attack vector and low complexity, resulting in partial availability impact. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion or media coverage.