Asterisk Remote Crash Vulnerability in SIP Channel Driver (AST-2012-006)

According to the version in its SIP banner, the version of Asterisk running on the remote host is potentially affected by a vulnerability that could allow a remote attacker to crash the server. This issue could be exploited by sending an UPDATE over a SIP channel after the channel dialog has been...

Asterisk VoIP server Skinny protocol resources aexhaustions

SIP dialog history is stored in memory regardless of settings, leading to memory exhaustion...