CVE-2013-5642

The SIP channel driver channels/chansip.c in Asterisk Open Source 1.8.x before 1.8.23.1, 10.x before 10.12.3, and 11.x before 11.5.1; Certified Asterisk 1.8.15 before 1.8.15-cert3 and 11.2 before 11.2-cert2; and Asterisk Digiumphones 10.x-digiumphones before 10.12.3-digiumphones allows remote...

Asterisk SIP Channel Driver Invalid SDP Denial of Service (AST-2013-005)

According to the version in its SIP banner, the version of Asterisk running on the remote host is potentially affected by a denial of service vulnerability. The application does not properly handle an invalid SDP in a SIP request if such a request defines media descriptions and then defines...

Mandriva Linux Security Advisory : asterisk (MDVSA-2013:223)

Updated asterisk packages fix security vulnerabilities : A remotely exploitable crash vulnerability exists in the SIP channel driver if an ACK with SDP is received after the channel has been terminated. The handling code incorrectly assumes that the channel will always be present CVE-2013-5641. A...

Asterisk uninitilized memory reference

Crash on SIP request processing...

asterisk -- Exploitable Stack Buffer Overflow

The Asterisk Development Team reports: The releases of Asterisk 1.4.38.1, 1.4.39.1, 1.6.1.21, 1.6.2.15.1, 1.6.2.16.2, 1.8.1.2, and 1.8.2.1 resolve an issue when forming an outgoing SIP request while in pedantic mode, which can cause a stack buffer to be made to overflow if supplied with carefully...

Zoiper softphone DoS

Crash on SIP request parsing...

Sql injection

Multiple SQL injection vulnerabilities in Avaya SIP Enablement Services SES in Avaya Avaya Communication Manager 3.x, 4.0, and 5.0 1 allow remote attackers to execute arbitrary SQL commands via unspecified vectors related to profiles in the SIP Personal Information Manager SPIM in the web...

CVE-2008-6573

Multiple SQL injection vulnerabilities in Avaya SIP Enablement Services SES in Avaya Avaya Communication Manager 3.x, 4.0, and 5.0 1 allow remote attackers to execute arbitrary SQL commands via unspecified vectors related to profiles in the SIP Personal Information Manager SPIM in the web...

CVE-2006-3594

Buffer overflow in Cisco Unified CallManager CUCM 5.01 through 5.03a allows remote attackers to execute arbitrary code via a long hostname in a SIP request, aka bug CSCsd96542...

CVE-2006-3594

CVE-2006-3594 refers to a buffer overflow in Cisco Unified CallManager (CUCM) 5.0(1)–5.0(3a) that lets remote attackers execute arbitrary code via a long hostname in a SIP request (bug CSCsd96542). The issue affects CUCM and is ranked HIGH with CVSS v2 base score 7.5, vector AV:N/AC:L/Au:N/C:P/I:...