CVE-2014-2287

channels/chansip.c in Asterisk Open Source 1.8.x before 1.8.26.1, 11.8.x before 11.8.1, and 12.1.x before 12.1.1, and Certified Asterisk 1.8.15 before 1.8.15-cert5 and 11.6 before 11.6-cert2, when chansip has a certain configuration, allows remote authenticated users to cause a denial of service...

Mandriva Linux Security Advisory : asterisk (MDVSA-2014:078)

Multiple vulnerabilities has been discovered and corrected in asterisk : Sending a HTTP request that is handled by Asterisk with a large number of Cookie headers could overflow the stack. You could even exhaust memory if you sent an unlimited number of headers in the request CVE-2014-2286. An...

Updated asterisk packages fix security vulnerabilities

Updated asterisk packages fix security vulnerabilities: In Asterisk before 11.8.1, sending a HTTP request that is handled by Asterisk with a large number of Cookie headers could overflow the stack. You could even exhaust memory if you sent an unlimited number of headers in the request...

Updated asterisk packages fix security vulnerabilities

Updated asterisk packages fix security vulnerabilities: In Asterisk before 11.6.1, a 16 bit SMS message that contains an odd message length value will cause the message decoding loop to run forever. The message buffer is not on the stack but will be overflowed resulting in corrupted memory and an...

MGASA-2014-0172 Updated asterisk packages fix security vulnerabilities

Updated asterisk packages fix security vulnerabilities: In Asterisk before 11.8.1, sending a HTTP request that is handled by Asterisk with a large number of Cookie headers could overflow the stack. You could even exhaust memory if you sent an unlimited number of headers in the request...

Cisco ASA Software Multiple Vulnerabilities (cisco-sa-20140409-asa)

The remote Cisco ASA device is affected by one or more of the following vulnerabilities : - An issue exists in the Adaptive Security Device Manager ADSM due to improper privilege assignment to users with a privilege level of zero. This issue allows an authenticated, remote attacker to gain...

CVE-2014-2129

The SIP inspection engine in Cisco Adaptive Security Appliance ASA Software 8.2 before 8.25.48, 8.4 before 8.46.5, 9.0 before 9.03.1, and 9.1 before 9.12.5 allows remote attackers to cause a denial of service memory consumption or device reload via crafted SIP packets, aka Bug ID CSCuh44052...

Code injection

The SIP inspection engine in Cisco Adaptive Security Appliance ASA Software 8.2 before 8.25.48, 8.4 before 8.46.5, 9.0 before 9.03.1, and 9.1 before 9.12.5 allows remote attackers to cause a denial of service memory consumption or device reload via crafted SIP packets, aka Bug ID CSCuh44052...

CVE-2014-2129

The SIP inspection engine in Cisco Adaptive Security Appliance ASA Software 8.2 before 8.25.48, 8.4 before 8.46.5, 9.0 before 9.03.1, and 9.1 before 9.12.5 allows remote attackers to cause a denial of service memory consumption or device reload via crafted SIP packets, aka Bug ID CSCuh44052...

CVE-2014-2129

CVE-2014-2129 affects Cisco ASA Software SIP inspection engine. Affected versions are ASA 8.2 before 8.2(5.48), 8.4 before 8.4(6.5), 9.0 before 9.0(3.1), and 9.1 before 9.1(2.5). The vulnerability allows remote attackers to trigger a denial of service via crafted SIP packets, leading to memory ex...

Multiple Vulnerabilities in Cisco ASA Software

Cisco Adaptive Security Appliance ASA Software is affected by the following vulnerabilities: Cisco ASA ASDM Privilege Escalation Vulnerability Cisco ASA SSL VPN Privilege Escalation Vulnerability Cisco ASA SSL VPN Authentication Bypass Vulnerability Cisco ASA SIP Denial of Service Vulnerability...

PT-2014-1323 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software versions 8.2 before 8.25.48 Cisco Adaptive Security Appliance ASA Software versions 8.4 before 8.46.5 Cisco Adaptive Security Appliance ASA Software versions 9.0 before 9.03.1 Cisco Adaptive...

Cisco IOS Software Session Initiation Protocol Denial of Service (cisco-sa-20140326-sip)

According to its self-reported version, the version of Cisco IOS running on the remote host is affected by a denial of service vulnerability in the Session Initiation Protocol SIP implementation. An unauthenticated, remote attacker could potentially exploit this issue to cause a denial of service...

Cisco IOS XE Software Session Initiation Protocol Denial of Service (cisco-sa-20140326-sip)

According to its self-reported version, the version of Cisco IOS XE running on the remote host is affected by a denial of service vulnerability in the Session Initiation Protocol SIP implementation. An unauthenticated, remote attacker could potentially exploit this issue to cause a denial of...

PhonerLite 2.14 SIP Soft Phone - SIP Digest Disclosure

PhonerLite 2.14 SIP Soft Phone - SIP Digest Disclosure -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 I. Advisory Summary Title: SIP Digest Leak Information Disclosure in PhonerLite 2.14 SIP Soft Phone Date Published: March 30, 2014 Vendors contacted: Heiko Sommerfeldt, PhonerLite author...

PhonerLite SIP摘要远程信息泄漏漏洞

Bugtraq ID:66539 CVE ID:CVE-2014-2560 PhonerLite是一款网络电话应用，可以让您的电脑使用新的互联网电话技术电话VoIP,IP语音。 PhonerLite允许恶意第三方伪造SIP INVITE消息，获取目标用户的SIP MD5摘要验证用户验证凭据哈希值。 0 PhonerLite 2.14 PhonerLite 2.15版本已修复该漏洞，建议用户下载使用： http://www.ektron.com/...

PhonerLite 2.14 SIP Soft Phone - SIP Digest Leak Information Disclosure (CVE-2014-2560)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 I. Advisory Summary Title: SIP Digest Leak Information Disclosure in PhonerLite 2.14 SIP Soft Phone Date Published: March 30, 2014 Vendors contacted: Heiko Sommerfeldt, PhonerLite author Discovered by: Jason Ostrom Severity: Medium II. Vulnerability...

PhonerLite 2.14 SIP Soft Phone - SIP Digest Disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 I. Advisory Summary Title: SIP Digest Leak Information Disclosure in PhonerLite 2.14 SIP Soft Phone Date Published: March 30, 2014 Vendors contacted: Heiko Sommerfeldt, PhonerLite author Discovered by: Jason Ostrom Severity: Medium II. Vulnerability...

wireshark: SIP dissector could go into an infinite loop (wnpa-sec-2013-66)

The dissectsipcommon function in epan/dissectors/packet-sip.c in the SIP dissector in Wireshark 1.8.x before 1.8.12 and 1.10.x before 1.10.4 does not check for empty lines, which allows remote attackers to cause a denial of service infinite loop via a crafted packet...

wireshark: SIP dissector crash (wnpa-sec-2013-63)

The dissectsipcommon function in epan/dissectors/packet-sip.c in the SIP dissector in Wireshark 1.8.x before 1.8.11 and 1.10.x before 1.10.3 does not properly initialize a data structure, which allows remote attackers to cause a denial of service application crash via a crafted packet...