CVE-2011-1174

manager.c in Asterisk Open Source 1.6.1.x before 1.6.1.24, 1.6.2.x before 1.6.2.17.2, and 1.8.x before 1.8.3.2 allows remote attackers to cause a denial of service CPU and memory consumption via a series of manager sessions involving invalid data...

CVE-2011-1174

CVE-2011-1174 affects Asterisk Open Source, specifically manager.c in 1.6.1.x (before 1.6.1.24), 1.6.2.x (before 1.6.2.17.2), and 1.8.x (before 1.8.3.2). The issue allows remote attackers to trigger a denial of service via a series of manager sessions with invalid data. Connected advisories also ...

CVE-2011-1174

manager.c in Asterisk Open Source 1.6.1.x before 1.6.1.24, 1.6.2.x before 1.6.2.17.2, and 1.8.x before 1.8.3.2 allows remote attackers to cause a denial of service CPU and memory consumption via a series of manager sessions involving invalid data...

CVE-2011-1175

tcptls.c in the TCP/TLS server in Asterisk Open Source 1.6.1.x before 1.6.1.23, 1.6.2.x before 1.6.2.17.1, and 1.8.x before 1.8.3.1 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash by establishing many short TCP sessions to services that use a certain...

CVE-2011-1175

tcptls.c in the TCP/TLS server in Asterisk Open Source 1.6.1.x before 1.6.1.23, 1.6.2.x before 1.6.2.17.1, and 1.8.x before 1.8.3.1 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash by establishing many short TCP sessions to services that use a certain...

CVE-2011-1175

CVE-2011-1175 affects Asterisk Open Source TCP/TLS server: tcptls.c allows remote denial of service (NULL pointer dereference/daemon crash) by establishing many short TCP sessions to services using a TLS API. Affected versions are 1.6.1.x < 1.6.1.23, 1.6.2.x < 1.6.2.17.1, and 1.8.x

CVE-2011-1174

manager.c in Asterisk Open Source 1.6.1.x before 1.6.1.24, 1.6.2.x before 1.6.2.17.2, and 1.8.x before 1.8.3.2 allows remote attackers to cause a denial of service CPU and memory consumption via a series of manager sessions involving invalid data...

[SECURITY] Fedora 14 Update: asterisk-1.6.2.17.2-1.fc14

Asterisk is a complete PBX in software. It runs on Linux and provides all of the features you would expect from a PBX and more. Asterisk does voice over IP in three protocols, and can interoperate with almost all standards-based telephony equipment using relatively inexpensive hardware...

[SECURITY] Fedora 13 Update: asterisk-1.6.2.17.2-1.fc13

Asterisk is a complete PBX in software. It runs on Linux and provides all of the features you would expect from a PBX and more. Asterisk does voice over IP in three protocols, and can interoperate with almost all standards-based telephony equipment using relatively inexpensive hardware...

[SECURITY] Fedora 15 Update: asterisk-1.8.3.2-1.fc15

Asterisk is a complete PBX in software. It runs on Linux and provides all of the features you would expect from a PBX and more. Asterisk does voice over IP in three protocols, and can interoperate with almost all standards-based telephony equipment using relatively inexpensive hardware...

Fedora 15 : asterisk-1.8.3.2-1.fc15 (2011-3958)

The Asterisk Development Team has announced security releases for Asterisk branches 1.6.1, 1.6.2, and 1.8. The available security releases are released as versions 1.6.1.24, 1.6.2.17.2, and 1.8.3.2. These releases are available for immediate download at...

AST-2011-003:

Product Asterisk Summary Resource exhaustion in Asterisk Manager Interface Nature of Advisory Denial of Service Susceptibility Remote Unauthenticated Sessions if manager interface is accessible Severity Moderate Exploits Known No Reported On March 1, 2011 Reported By Blake Cornell...

Asterisk DoS

Connection flood leads to resources exhaustion...

AST-2011-004:

Product Asterisk Summary Remote crash vulnerability in TCP/TLS server Nature of Advisory Denial of Service Susceptibility Remote Unauthenticated Sessions Severity Critical Exploits Known No Reported On March 1, 2011 Reported By Blake Cornell [email protected] and Chris Maj [email protected]...

Asterisk Multiple Denial of Service Vulnerabilities (AST-2011-003/AST-2011-004)

Binary data 5825.prm...

Asterisk Multiple Denial of Service Vulnerabilities (AST-2011-003 / AST-2011-004)

According to the version in its SIP banner, the version of Asterisk running on the remote host may be affected by multiple denial of service vulnerabilities : - A resource exhaustion issue exists in the Asterisk manager interface. - A NULL pointer dereference issue exists in the TCP/TLS server...

FreeBSD : asterisk -- Multiple Vulnerabilities (bfe9c75e-5028-11e0-b2d2-00215c6a37bb)

The Asterisk Development Team reports : The releases of Asterisk 1.6.1.23, 1.6.2.17.1, and 1.8.3.1 resolve two issues : - Resource exhaustion in Asterisk Manager Interface AST-2011-003 - Remote crash vulnerability in TCP/TLS server AST-2011-004 The issues and resolutions are described in the...

CVE-2011-1147

Multiple stack-based and heap-based buffer overflows in the 1 decodeopentype and 2 udptlrxpacket functions in main/udptl.c in Asterisk Open Source 1.4.x before 1.4.39.2, 1.6.1.x before 1.6.1.22, 1.6.2.x before 1.6.2.16.2, and 1.8 before 1.8.2.4; Business Edition C.x.x before C.3.6.3; AsteriskNOW...

CVE-2011-1147

Multiple stack-based and heap-based buffer overflows in the 1 decodeopentype and 2 udptlrxpacket functions in main/udptl.c in Asterisk Open Source 1.4.x before 1.4.39.2, 1.6.1.x before 1.6.1.22, 1.6.2.x before 1.6.2.16.2, and 1.8 before 1.8.2.4; Business Edition C.x.x before C.3.6.3; AsteriskNOW...

DEBIAN-CVE-2011-1147

Multiple stack-based and heap-based buffer overflows in the 1 decodeopentype and 2 udptlrxpacket functions in main/udptl.c in Asterisk Open Source 1.4.x before 1.4.39.2, 1.6.1.x before 1.6.1.22, 1.6.2.x before 1.6.2.16.2, and 1.8 before 1.8.2.4; Business Edition C.x.x before C.3.6.3; AsteriskNOW...