CVE-2012-0885

CVE-2012-0885 affects Asterisk Open Source: 1.8.x before 1.8.8.2 and 10.x before 10.0.1. When the res_srtp module is loaded and media support is misconfigured, a crafted SDP message with a crypto attribute can cause a NULL pointer dereference and daemon crash (DoS) via either a video or text medi...