2 matches found
Stack overflow
Stack-based buffer overflow in the astparsedigest function in main/utils.c in Asterisk 1.8.x before 1.8.10.1 and 10.x before 10.2.1 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a long string in an HTTP Digest Authentication header...
GLSA-201203-21 : Asterisk: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201203-21 Asterisk: Multiple vulnerabilities Two vulnerabilities have been found in Asterisk: The 'milliwattgenerate' function in appmilliwatt.c is vulnerable to a stack overrun AST-2012-002. The 'astparsedigest' function in utils...