CVE-2009-2726

CVE-2009-2726 describes a denial-of-service vulnerability in various versions of Asterisk Open Source, Business Edition, and Appliance s800i. The flaw stems from the SIP channel driver's failure to limit input width when parsing SIP packets, allowing remote attackers to exhaust stack memory by sending oversized ASCII decimal sequences in fields like CSeq, Content-Length, or SDP. With a CVSS score of 7.8 (High), this vulnerability is easily exploitable over the network without authentication, leading to a complete denial of service. While it has a high FAUCET Risk Score, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.