GLSA-201110-21 : Asterisk: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201110-21 Asterisk: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Asterisk. Please review the CVE identifiers referenced below for details. Impact : An unauthenticated remote attacker may execute code...

AST-2011-012: Remote crash vulnerability in SIP channel driver

Asterisk Project Security Advisory - AST-2011-012 Product Asterisk Summary Remote crash vulnerability in SIP channel driver Nature of Advisory Remote crash Susceptibility Remote authenticated sessions Severity Critical Exploits Known No Reported On October 4, 2011 Reported By Ehsan Foroughi Poste...

Asterisk: Multiple vulnerabilities

Background Asterisk is an open source telephony engine and toolkit. Description Multiple vulnerabilities have been discovered in Asterisk. Please review the CVE identifiers referenced below for details. Impact An unauthenticated remote attacker may execute code with the privileges of the Asterisk...

Asterisk uninitilized memory reference

Crash on SIP request processing...

CVE-2011-4063

chansip.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.7.1 and 10.x before 10.0.0-rc1 does not properly initialize variables during request parsing, which allows remote authenticated users to cause a denial of service daemon crash via a malformed request...

DEBIAN-CVE-2011-4063

chansip.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.7.1 and 10.x before 10.0.0-rc1 does not properly initialize variables during request parsing, which allows remote authenticated users to cause a denial of service daemon crash via a malformed request...

CVE-2011-4063

chansip.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.7.1 and 10.x before 10.0.0-rc1 does not properly initialize variables during request parsing, which allows remote authenticated users to cause a denial of service daemon crash via a malformed request...

Design/Logic Flaw

chansip.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.7.1 and 10.x before 10.0.0-rc1 does not properly initialize variables during request parsing, which allows remote authenticated users to cause a denial of service daemon crash via a malformed request...

CVE-2011-4063

chansip.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.7.1 and 10.x before 10.0.0-rc1 does not properly initialize variables during request parsing, which allows remote authenticated users to cause a denial of service daemon crash via a malformed request...

CVE-2011-4063

chansip.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.7.1 and 10.x before 10.0.0-rc1 does not properly initialize variables during request parsing, which allows remote authenticated users to cause a denial of service daemon crash via a malformed request...

CVE-2011-4063

CVE-2011-4063 affects Asterisk Open Source 1.8.x (before 1.8.7.1) and 10.x (before 10.0.0-rc1). The SIP channel driver (chan_sip.c) does not properly initialize variables during request parsing, allowing remote authenticated users to trigger a denial-of-service and cause the daemon to crash. Miti...

CVE-2011-4063

chansip.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.7.1 and 10.x before 10.0.0-rc1 does not properly initialize variables during request parsing, which allows remote authenticated users to cause a denial of service daemon crash via a malformed request...

Asterisk Remote Crash Vulnerability in SIP Channel Driver (AST-2011-012)

Binary data 6043.prm...

FreeBSD : asterisk -- remote crash vulnerability in SIP channel driver (a95092a6-f8f1-11e0-a7ea-00215c6a37bb)

Asterisk project reports : A remote authenticated user can cause a crash with a malformed request due to an uninitialized variable. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyrigh...

asterisk -- remote crash vulnerability in SIP channel driver

Asterisk project reports: A remote authenticated user can cause a crash with a malformed request due to an unitialized variable...

Asterisk Peer IAX2 Call Handling ACL Rule Bypass (AST-2012-013)

Binary data 6568.prm...

Free PBX Phone System v2.x v3.x - Multiple Vulnerabilities

Document Title: =============== Free PBX Phone System v2.x v3.x - Multiple Vulnerabilities Release Date: ============= 2011-08-08 Vulnerability Laboratory ID VL-ID: ==================================== 79 Product & Service Introduction: =============================== Its Hard to Beat Free FreePB...

Debian: Security Advisory (DSA-2276-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 2276-1 (asterisk)

The remote host is missing an update to asterisk announced via advisory DSA 2276-1. OpenVAS Vulnerability Test $Id: deb22761.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2276-1 asterisk Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

Debian Security Advisory DSA 2276-2 (asterisk)

The remote host is missing an update to asterisk announced via advisory DSA 2276-2. OpenVAS Vulnerability Test $Id: deb22762.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2276-2 asterisk Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...