Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
mageiaGentoo FoundationMGASA-2015-0153
HistoryApr 15, 2015 - 12:01 p.m.

Updated asterisk packages fix CVE-2015-3008

2015-04-1512:01:28
Gentoo Foundation
advisories.mageia.org
10

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.905 High

EPSS

Percentile

98.8%

JSON

Updated asterisk packages fix security vulnerability: When Asterisk registers to a SIP TLS device and and verifies the server, Asterisk will accept signed certificates that match a common name other than the one Asterisk is expecting if the signed certificate has a common name containing a null byte after the portion of the common name that Asterisk expected (CVE-2015-3008).

OSVersionArchitecturePackageVersionFilename
Mageia4noarchasterisk< 11.17.1-1asterisk-11.17.1-1.mga4

Related

nessus 6
ubuntucve 1
cve 1
openvas 6
freebsd 1
prion 1
debiancve 1
securityvulns 2
fedora 1
checkpoint_advisories 1
debian 2
osv 1
nessus
nessus
FreeBSD : asterisk -- TLS Certificate Common name NULL byte exploit (5fee3f02-de37-11e4-b7c3-001999f8d30b)
2015-04-09 00:00:00
Asterisk TLS Certificate Common Name NULL Byte Vulnerability (AST-2015-003)
2015-04-20 00:00:00
Fedora 22 : asterisk-13.3.2-1.fc22 (2015-5948)
2015-07-22 00:00:00
ubuntucve
ubuntucve
CVE-2015-3008
2015-04-10 00:00:00
cve
cve
CVE-2015-3008
2015-04-10 15:00:00
openvas
openvas
Asterisk TLS Certificate Common Name NULL Byte Vulnerability (AST-2015-003)
2016-08-08 00:00:00
Mageia: Security Advisory (MGASA-2015-0153)
2022-01-28 00:00:00
Fedora Update for asterisk FEDORA-2015-5948
2015-07-22 00:00:00
freebsd
freebsd
asterisk -- TLS Certificate Common name NULL byte exploit
2015-04-04 00:00:00
prion
prion
Design/Logic Flaw
2015-04-10 15:00:00
debiancve
debiancve
CVE-2015-3008
2015-04-10 15:00:00
securityvulns
securityvulns
AST-2015-003: TLS Certificate Common name NULL byte exploit
2015-04-13 00:00:00
Asterisk certificate validation bypass
2015-04-13 00:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: asterisk-13.3.2-1.fc22
2015-07-21 08:17:44
checkpoint_advisories
checkpoint_advisories
Multiple Vendors TLS Certificate Common Name NULL Byte Input Validation Error (CVE-2015-3008; CVE-2015-3455)
2015-05-21 00:00:00
debian
debian
[SECURITY] [DSA 3700-1] asterisk security update
2016-10-25 20:48:34
[SECURITY] [DLA 455-1] asterisk security update
2016-05-03 20:31:18
osv
osv
asterisk - security update
2016-05-03 00:00:00

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.905 High

EPSS

Percentile

98.8%

JSON
Related for MGASA-2015-0153
nessus6ubuntucve1cve1openvas6freebsd1prion1debiancve1securityvulns2fedora1checkpoint_advisories1debian2osv1