CVE-2014-2289

res/respjsipextenstate.c in the PJSIP channel driver in Asterisk Open Source 12.x before 12.1.0 allows remote authenticated users to cause a denial of service crash via a SUBSCRIBE request without any Accept headers, which triggers an invalid pointer dereference...

CVE-2014-2289

CVE-2014-2289 affects Asterisk Open Source 12.x prior to 12.1.0 in res/res_pjsip_exten_state.c (PJSIP channel driver). A remote authenticated user can trigger a denial of service (crash) by sending a SUBSCRIBE request without Accept headers, causing an invalid pointer dereference. The issue is fi...

AST-2014-004: Remote Crash Vulnerability in PJSIP Channel Driver Subscription Handling

Asterisk Project Security Advisory - AST-2014-004 Product Asterisk Summary Remote Crash Vulnerability in PJSIP Channel Driver Subscription Handling Nature of Advisory Denial of Service Susceptibility Remote Authenticated Sessions Severity Moderate Exploits Known No Reported On January 14th, 2014...