CVE-2017-3790

A vulnerability in the received packet parser of Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS software could allow an unauthenticated, remote attacker to cause a reload of the affected system, resulting in a denial of service DoS condition. The vulnerability is du...

CVE-2017-3790

CVE-2017-3790 affects Cisco Expressway Series and Cisco TelePresence VCS Software prior to 8.8.2. The flaw arises from insufficient size validation in the received-packet parser, allowing an unauthenticated remote attacker to send crafted H.224 data in RTP within an H.323 call to overflow a cache...

Buffer overflow

The RTP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:rtpprint...

DEBIAN-CVE-2016-7935

The RTP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:rtpprint...

CVE-2016-7935

The RTP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:rtpprint...

CVE-2016-7935

The RTP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:rtpprint...

CVE-2016-7935

The RTP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:rtpprint...

CVE-2016-7935

The RTP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:rtpprint...

CVE-2016-7935

The RTP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:rtpprint...

Cisco TelePresence VCS Denial of Service Vulnerability (cisco-sa-20170125-expressway)

A vulnerability in the received packet parser of Cisco TelePresence Video Communication Server VCS software could allow an unauthenticated, remote attacker to cause a reload of the affected system, resulting in a denial of service DoS condition. SPDX-FileCopyrightText: 2017 Greenbone AG Some text...

Cisco Expressway Series and TelePresence VCS Denial of Service Vulnerability

A vulnerability in the received packet parser of Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS software could allow an unauthenticated, remote attacker to cause a reload of the affected system, resulting in a denial of service DoS condition. The vulnerability is du...

[SECURITY] [DLA 781-1] asterisk security update

Package : asterisk Version : 1:1.8.13.1dfsg1-3+deb7u5 CVE ID : CVE-2014-2287 CVE-2016-7551 Debian Bug : 838832 741313 Two security vulnerabilities were discovered in Asterisk, an Open Source PBX and telephony toolkit. CVE-2014-2287 channels/chansip.c in Asterisk when chansip has a certain...

MGASA-2016-0344 Updated asterisk packages fixes security vulnerability

The overlap dialing feature in chansip allows chansip to report to a device that the number that has been dialed is incomplete and more digits are required. If this functionality is used with a device that has performed username/password authentication RTP resources are leaked. This occurs becaus...

Updated asterisk packages fixes security vulnerability

The overlap dialing feature in chansip allows chansip to report to a device that the number that has been dialed is incomplete and more digits are required. If this functionality is used with a device that has performed username/password authentication RTP resources are leaked. This occurs becaus...

Bugs in Signal Messaging App Corrupt Attachments, Crash App

Makers of the mobile encrypted chat app Signal say they have fixed vulnerabilities in the Android version of the messaging app that allowed attackers to corrupt encrypted attachments and remotely crash the application. The vulnerabilities were discovered by Jean-Philippe Aumasson and Markus Vervi...

Asterisk chan_sip Overlap Dialing Feature DoS (AST-2016-007)

According to its SIP banner, the version of Asterisk running on the remote host is 11.x prior to 11.23.1, 13.x prior to 13.11.1, 11.6-certx prior to 11.6-cert15, or 13.8-certx prior to 13.8-cert3. It is, therefore, affected by a flaw in the overlap dialing feature in chansip due to a failure to...

Asterisk RTP Resource Exhaustion Vulnerability (AST-2016-007)

Asterisk is prone to a RTP resource exhaustion vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:digium:asterisk"; i...

FreeBSD : asterisk -- RTP Resource Exhaustion (5cb18881-7604-11e6-b362-001999f8d30b)

The Asterisk project reports : The overlap dialing feature in chansip allows chansip to report to a device that the number that has been dialed is incomplete and more digits are required. If this functionality is used with a device that has performed username/password authentication RTP resources...

Google Chrome < 52.0.2743.116 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 52.0.2743.116. It is, therefore, affected by multiple vulnerabilities as referenced in the 201608stable-channel-update-for-desktop advisory. - Multiple unspecified vulnerabilities in Google Chrome before 52.0.2743.116...

asterisk -- RTP Resource Exhaustion

The Asterisk project reports: The overlap dialing feature in chansip allows chansip to report to a device that the number that has been dialed is incomplete and more digits are required. If this functionality is used with a device that has performed username/password authentication RTP resources...