asterisk -- multiple vulnerabilities

Asterisk project reports: Possible resource leak on uncompleted re-invite transactions. Remote crash vulnerability in voice mail application...

Debian DSA-2493-1 : asterisk - denial of service

Several vulnerabilities were discovered in Asterisk, a PBX and telephony toolkit. - CVE-2012-2947 The IAX2 channel driver allows remote attackers to cause a denial of service daemon crash by placing a call on hold when a certain mohinterpret setting is enabled. - CVE-2012-2948 The Skinny channel...

[SECURITY] Fedora 17 Update: asterisk-10.5.1-1.fc17

Asterisk is a complete PBX in software. It runs on Linux and provides all of the features you would expect from a PBX and more. Asterisk does voice over IP in three protocols, and can interoperate with almost all standards-based telephony equipment using relatively inexpensive hardware...

Asterisk Remote Crash Vulnerability in Skinny Channel Driver (AST-2012-009)

According to the version in its SIP banner, the version of Asterisk running on the remote host is potentially affected by a vulnerability that could allow a remote attacker to crash the server. This issue could be exploited when the attacker has a valid SCCP Skinny ID and closes a connection when...

Fedora 17 : asterisk-10.5.1-1.fc17 (2012-9537)

The Asterisk Development Team has announced a security release for Asterisk 10. This security release is released as version 10.5.1. The release is available for immediate download at http://downloads.asterisk.org/pub/telephony/asterisk/releases The release of Asterisk 10.5.1 resolves the followi...

Qutecom Softphone 2.2.1 Heap Overflow DoS/Crash Proof of Concept

Exploit for windows platform in category dos / poc Title: Qutecom Cross-platform, open source softphone Heap Overflow DoS/Crash Proof of Concept Date: 14th June 2012 Exploit Author: Debasish Mandal Author's Blog : http://www.debasish.in/ Vendor Homepage: http://qutecom.org/ Software Link:...

GLSA-201203-21 : Asterisk: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201203-21 Asterisk: Multiple vulnerabilities Two vulnerabilities have been found in Asterisk: The 'milliwattgenerate' function in appmilliwatt.c is vulnerable to a stack overrun AST-2012-002. The 'astparsedigest' function in utils...

Asterisk: Multiple vulnerabilities

Background Asterisk is an open source telephony engine and toolkit. Description Multiple vulnerabilities have been found in Asterisk: An error in manager.c allows shell access through the MixMonitor application, GetVar, or Status CVE-2012-2414. An error in chanskinny.c could cause a heap-based...

GLSA-201206-05 : Asterisk: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201206-05 Asterisk: Multiple vulnerabilities Multiple vulnerabilities have been found in Asterisk: An error in manager.c allows shell access through the MixMonitor application, GetVar, or Status CVE-2012-2414. An error in...

CVE-2012-3553

chanskinny.c in the Skinny aka SCCP channel driver in Asterisk Open Source 10.x before 10.5.1 allows remote authenticated users to cause a denial of service NULL pointer dereference and daemon crash by sending a Station Key Pad Button message and closing a connection in off-hook mode, a related...

Null pointer dereference

chanskinny.c in the Skinny aka SCCP channel driver in Asterisk Open Source 10.x before 10.5.1 allows remote authenticated users to cause a denial of service NULL pointer dereference and daemon crash by sending a Station Key Pad Button message and closing a connection in off-hook mode, a related...

CVE-2012-3553

chanskinny.c in the Skinny aka SCCP channel driver in Asterisk Open Source 10.x before 10.5.1 allows remote authenticated users to cause a denial of service NULL pointer dereference and daemon crash by sending a Station Key Pad Button message and closing a connection in off-hook mode, a related...

CVE-2012-3553

chanskinny.c in the Skinny aka SCCP channel driver in Asterisk Open Source 10.x before 10.5.1 allows remote authenticated users to cause a denial of service NULL pointer dereference and daemon crash by sending a Station Key Pad Button message and closing a connection in off-hook mode, a related...

CVE-2012-3553

chanskinny.c in the Skinny aka SCCP channel driver in Asterisk Open Source 10.x before 10.5.1 allows remote authenticated users to cause a denial of service NULL pointer dereference and daemon crash by sending a Station Key Pad Button message and closing a connection in off-hook mode, a related...

CVE-2012-3553

CVE-2012-3553 affects Asterisk Open Source 10.x prior to 10.5.1, specifically chan_skinny.c (Skinny/SCCP channel driver). A NULL pointer dereference in off-hook state when a Station Key Pad Button message is closed can be exploited by remote authenticated users to crash the server (DoS). Remediat...

CVE-2012-3553

chanskinny.c in the Skinny aka SCCP channel driver in Asterisk Open Source 10.x before 10.5.1 allows remote authenticated users to cause a denial of service NULL pointer dereference and daemon crash by sending a Station Key Pad Button message and closing a connection in off-hook mode, a related...

PT-2012-4804

Name of the Vulnerable Software and Affected Versions Asterisk Open Source versions prior to 10.5.1 Description The issue allows remote authenticated users to cause a denial of service, resulting in a daemon crash due to a NULL pointer dereference. This occurs when a Station Key Pad Button messag...

Fedora Update for asterisk FEDORA-2012-8692

Check for the Version of asterisk OpenVAS Vulnerability Test Fedora Update for asterisk FEDORA-2012-8692 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CVE-2012-3553: Undefined Security Weakness

chanskinny.c in the Skinny aka SCCP channel driver in Asterisk Open Source 10.x before 10.5.1 allows remote authenticated users to cause a denial of service NULL pointer dereference and daemon crash by sending a Station Key Pad Button message and closing a connection in off-hook mode, a related...

Fedora Update for asterisk FEDORA-2012-8685

Check for the Version of asterisk OpenVAS Vulnerability Test Fedora Update for asterisk FEDORA-2012-8685 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...