CVE-2018-12227

An issue was discovered in Asterisk Open Source 13.x before 13.21.1, 14.x before 14.7.7, and 15.x before 15.4.1 and Certified Asterisk 13.18-cert before 13.18-cert4 and 13.21-cert before 13.21-cert2. When endpoint specific ACL rules block a SIP request, they respond with a 403 forbidden. However,...

Digium Asterisk pjsip_multipart_parse Denial of Service

A denial of service vulnerability exists in Digium Asterisk. The vulnerability is due to a processing flaw in the pjsipmultipartparse function of sipmultipart.c when the chanpjsip module is used. A remote, unauthenticated attacker could exploit this vulnerability by sending a maliciously crafted...

SX Design sipd 0.1.2 - Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9198/info It has been reported that sipd may be prone to a vulnerability that may allow a remote attacker to cause a denial of service condition in the software. The problem is reported to exist in the gethostbynamer...

CVE-2013-5642

The SIP channel driver channels/chansip.c in Asterisk Open Source 1.8.x before 1.8.23.1, 10.x before 10.12.3, and 11.x before 11.5.1; Certified Asterisk 1.8.15 before 1.8.15-cert3 and 11.2 before 11.2-cert2; and Asterisk Digiumphones 10.x-digiumphones before 10.12.3-digiumphones allows remote...

CVE-2013-5642

The SIP channel driver channels/chansip.c in Asterisk Open Source 1.8.x before 1.8.23.1, 10.x before 10.12.3, and 11.x before 11.5.1; Certified Asterisk 1.8.15 before 1.8.15-cert3 and 11.2 before 11.2-cert2; and Asterisk Digiumphones 10.x-digiumphones before 10.12.3-digiumphones allows remote...

CVE-2013-5642: Improper Input Validation

The SIP channel driver channels/chansip.c in Asterisk Open Source 1.8.x before 1.8.23.1, 10.x before 10.12.3, and 11.x before 11.5.1; Certified Asterisk 1.8.15 before 1.8.15-cert3 and 11.2 before 11.2-cert2; and Asterisk Digiumphones 10.x-digiumphones before 10.12.3-digiumphones allows remote...

Asterisk SIP Channel Driver Invalid SDP Denial of Service (AST-2013-005)

According to the version in its SIP banner, the version of Asterisk running on the remote host is potentially affected by a denial of service vulnerability. The application does not properly handle an invalid SDP in a SIP request if such a request defines media descriptions and then defines...

Mandriva Linux Security Advisory : asterisk (MDVSA-2013:223)

Updated asterisk packages fix security vulnerabilities : A remotely exploitable crash vulnerability exists in the SIP channel driver if an ACK with SDP is received after the channel has been terminated. The handling code incorrectly assumes that the channel will always be present CVE-2013-5641. A...

Asterisk uninitilized memory reference

Crash on SIP request processing...

asterisk -- Exploitable Stack Buffer Overflow

The Asterisk Development Team reports: The releases of Asterisk 1.4.38.1, 1.4.39.1, 1.6.1.21, 1.6.2.15.1, 1.6.2.16.2, 1.8.1.2, and 1.8.2.1 resolve an issue when forming an outgoing SIP request while in pedantic mode, which can cause a stack buffer to be made to overflow if supplied with carefully...

Zoiper softphone DoS

Crash on SIP request parsing...

Sql injection

Multiple SQL injection vulnerabilities in Avaya SIP Enablement Services SES in Avaya Avaya Communication Manager 3.x, 4.0, and 5.0 1 allow remote attackers to execute arbitrary SQL commands via unspecified vectors related to profiles in the SIP Personal Information Manager SPIM in the web...

CVE-2008-6573

Multiple SQL injection vulnerabilities in Avaya SIP Enablement Services SES in Avaya Avaya Communication Manager 3.x, 4.0, and 5.0 1 allow remote attackers to execute arbitrary SQL commands via unspecified vectors related to profiles in the SIP Personal Information Manager SPIM in the web...

CVE-2006-3594

Buffer overflow in Cisco Unified CallManager CUCM 5.01 through 5.03a allows remote attackers to execute arbitrary code via a long hostname in a SIP request, aka bug CSCsd96542...

CVE-2006-3594

CVE-2006-3594 refers to a buffer overflow in Cisco Unified CallManager (CUCM) 5.0(1)–5.0(3a) that lets remote attackers execute arbitrary code via a long hostname in a SIP request (bug CSCsd96542). The issue affects CUCM and is ranked HIGH with CVSS v2 base score 7.5, vector AV:N/AC:L/Au:N/C:P/I:...

CVE-2006-3594: Undefined Security Weakness

Buffer overflow in Cisco Unified CallManager CUCM 5.01 through 5.03a allows remote attackers to execute arbitrary code via a long hostname in a SIP request, aka bug CSCsd96542...