Lucene search
+L

59 matches found

CNNVD
CNNVD
•added 2021/12/22 12:00 a.m.•19 views

PJSIP 缓冲区错误漏洞

PJSIP is a free and open source multimedia communications library written in C that implements standards-based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. PJSIP suffers from a buffer error vulnerability that arises from the fact that if an incoming "RTCP BYE" message contains a reason...

7.5CVSS7.7AI score0.02133EPSS
SaveExploits0References14
Mend
Mend
•added 2021/12/22 12:00 a.m.•2 views

CVE-2021-43804

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In affected versions if the incoming RTCP BYE message contains a reason's length, this declared length is not checked against th...

7.5CVSS0.02133EPSS
SaveExploits0References11
attackerkb
attackerkb
•added 2021/07/30 2:15 p.m.•11 views

CVE-2021-31878

An issue was discovered in PJSIP in Asterisk before 16.19.1 and before 18.5.1. To exploit, a re-INVITE without SDP must be received after Asterisk has sent a BYE request...

6.5CVSS6.6AI score0.02463EPSS
SaveExploits1References6
Prion
Prion
•added 2021/07/30 2:15 p.m.•25 views

Cross site request forgery (csrf)

An issue was discovered in PJSIP in Asterisk before 16.19.1 and before 18.5.1. To exploit, a re-INVITE without SDP must be received after Asterisk has sent a BYE request...

4CVSS6.4AI score0.02463EPSS
SaveExploits1References5Affected Software1
Debian CVE
Debian CVE
•added 2021/07/27 5:17 a.m.•69 views

CVE-2021-31878

An issue was discovered in PJSIP in Asterisk before 16.19.1 and before 18.5.1. To exploit, a re-INVITE without SDP must be received after Asterisk has sent a BYE request...

6.5CVSS6.4AI score0.02463EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/27 12:00 a.m.•6 views

CVE-2021-31878: Reachable Assertion

An issue was discovered in PJSIP in Asterisk before 16.19.1 and before 18.5.1. To exploit, a re-INVITE without SDP must be received after Asterisk has sent a BYE request...

6.5CVSS5.7AI score0.02463EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/04/06 12:00 a.m.•0 views

PT-2021-6449

Name of the Vulnerable Software and Affected Versions Asterisk versions prior to 16.19.1 Asterisk versions prior to 18.5.1 Description The issue is related to the incorrect handling of a re-INVITE after a BYE request has been sent. This can be exploited by a remote attacker, allowing them to caus...

6.5CVSS0.02463EPSS
SaveExploits1References12
Joomla! Vulnerable Extensions List
Joomla! Vulnerable Extensions List
•added 2017/08/17 12:00 a.m.•32 views

Bye Bye Password,1.0.4,Information Disclosure

Bye Bye Password by Ready Bytes, versions 1.0.4 and previous, Information Disclosure Also the installer includes a tracking script...

1.9AI score
SaveExploits0References2Affected Software1
seebug.org
seebug.org
•added 2015/12/31 12:00 a.m.•19 views

FreeFloat FTP BYE Command Buffer Overflow

No description provided by source...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•20 views

Asterisk 1.x - BYE Message Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/27110/info Asterisk is prone to a remote denial-of-service vulnerability. Exploiting this issue allows remote attackers to cause the application to crash, effectively denying service to legitimate users. BYE...

7.1AI score
SaveExploits0
zdt
zdt
•added 2014/04/09 12:00 a.m.•56 views

Asterisk 1.x - BYE Message Remote Denial of Service Vulnerability

Exploit for multiple platform in category dos / poc source: http://www.securityfocus.com/bid/27110/info Asterisk is prone to a remote denial-of-service vulnerability. Exploiting this issue allows remote attackers to cause the application to crash, effectively denying service to legitimate users...

5CVSS6.6AI score0.25423EPSS
SaveExploits3
OSV
OSV
•added 2008/01/08 2:46 a.m.•9 views

DEBIAN-CVE-2008-0095

The SIP channel driver in Asterisk Open Source 1.4.x before 1.4.17, Business Edition before C.1.0-beta8, AsteriskNOW before beta7, Appliance Developer Kit before Asterisk 1.4 revision 95946, and Appliance s800i 1.0.x before 1.0.3.4 allows remote attackers to cause a denial of service daemon crash...

5CVSS6.7AI score0.25423EPSS
SaveExploits3References1
Cvelist
Cvelist
•added 2008/01/08 2:00 a.m.•44 views

CVE-2008-0095

The SIP channel driver in Asterisk Open Source 1.4.x before 1.4.17, Business Edition before C.1.0-beta8, AsteriskNOW before beta7, Appliance Developer Kit before Asterisk 1.4 revision 95946, and Appliance s800i 1.0.x before 1.0.3.4 allows remote attackers to cause a denial of service daemon crash...

6.3AI score0.25423EPSS
SaveExploits3References12
Debian CVE
Debian CVE
•added 2008/01/08 2:00 a.m.•35 views

CVE-2008-0095

The SIP channel driver in Asterisk Open Source 1.4.x before 1.4.17, Business Edition before C.1.0-beta8, AsteriskNOW before beta7, Appliance Developer Kit before Asterisk 1.4 revision 95946, and Appliance s800i 1.0.x before 1.0.3.4 allows remote attackers to cause a denial of service daemon crash...

5CVSS6.1AI score0.25423EPSS
SaveExploits3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/01/08 12:00 a.m.•5 views

CVE-2008-0095: Undefined Security Weakness

The SIP channel driver in Asterisk Open Source 1.4.x before 1.4.17, Business Edition before C.1.0-beta8, AsteriskNOW before beta7, Appliance Developer Kit before Asterisk 1.4 revision 95946, and Appliance s800i 1.0.x before 1.0.3.4 allows remote attackers to cause a denial of service daemon crash...

5CVSS5.7AI score0.25423EPSS
SaveExploits3References2
securityvulns
securityvulns
•added 2008/01/03 12:00 a.m.•31 views

Asterisk SIP Also transfer DoS

NULL pointer dereference on BYE message parsing...

3.3AI score
SaveExploits0References1Affected Software1
securityvulns
securityvulns
•added 2008/01/03 12:00 a.m.•34 views

AST-2008-001: Crash from transfer using BYE with Also header

Asterisk Project Security Advisory - AST-2008-001 +------------------------------------------------------------------------+ | Product | Asterisk | |---------------------+--------------------------------------------------| | Summary | Remote Crash Vulnerability in SIP channel driver |...

0.4AI score
SaveExploits0
exploitpack
exploitpack
•added 2008/01/02 12:00 a.m.•17 views

Asterisk 1.x - BYE Message Remote Denial of Service

Asterisk 1.x - BYE Message Remote Denial of Service source: https://www.securityfocus.com/bid/27110/info Asterisk is prone to a remote denial-of-service vulnerability. Exploiting this issue allows remote attackers to cause the application to crash, effectively denying service to legitimate users...

0.4AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2008/01/02 12:00 a.m.•32 views

Asterisk 1.x - BYE Message Remote Denial of Service

source: https://www.securityfocus.com/bid/27110/info Asterisk is prone to a remote denial-of-service vulnerability. Exploiting this issue allows remote attackers to cause the application to crash, effectively denying service to legitimate users. BYE sip:[email protected] SIP/2.0 Via: SIP/2.0/UDP...

5CVSS5.8AI score0.25423EPSS
SaveExploits3
Rows per page
Query Builder