Fedora 15 : asterisk-1.8.4.2-1.fc15.1 (2011-8319)

The Asterisk Development Team has announced the release of Asterisk version 1.8.4.2, which is a security release for Asterisk 1.8. This release is available for immediate download at http://downloads.asterisk.org/pub/telephony/asterisk/releases The release of Asterisk 1.8.4.2 resolves an issue wi...

[SECURITY] Fedora 15 Update: asterisk-1.8.4.2-1.fc15.1

Asterisk is a complete PBX in software. It runs on Linux and provides all of the features you would expect from a PBX and more. Asterisk does voice over IP in three protocols, and can interoperate with almost all standards-based telephony equipment using relatively inexpensive hardware...

Asterisk -- multiple vulnerabilities

The Asterisk Development Team reports: AST-2011-008: If a remote user sends a SIP packet containing a NULL, Asterisk assumes available data extends past the null to the end of the packet when the buffer is actually truncated when copied. This causes SIP header parsing to modify data past the end ...

CVE-2011-2216

reqrespparser.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.4.2 does not initialize certain strings, which allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a malformed Contact header...

CVE-2011-2216

reqrespparser.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.4.2 does not initialize certain strings, which allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a malformed Contact header...

DEBIAN-CVE-2011-2216

reqrespparser.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.4.2 does not initialize certain strings, which allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a malformed Contact header...

CVE-2011-2216

reqrespparser.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.4.2 does not initialize certain strings, which allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a malformed Contact header...

Null pointer dereference

reqrespparser.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.4.2 does not initialize certain strings, which allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a malformed Contact header...

CVE-2011-2216

The CVE affects Asterisk Open Source 1.8.x (before 1.8.4.2). In the SIP channel driver, reqresp_parser.c fails to initialize certain strings, allowing a remote attacker to trigger a NULL pointer dereference via a malformed Contact header, causing a denial of service (daemon crash). Remediation: u...

CVE-2011-2216

reqrespparser.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.4.2 does not initialize certain strings, which allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a malformed Contact header...

CVE-2011-2216

reqrespparser.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.4.2 does not initialize certain strings, which allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a malformed Contact header...

CVE-2011-2216

reqrespparser.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.4.2 does not initialize certain strings, which allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a malformed Contact header...

CVE-2011-2216: Undefined Security Weakness

reqrespparser.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.4.2 does not initialize certain strings, which allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a malformed Contact header...

PT-2011-3686

Name of the Vulnerable Software and Affected Versions Asterisk Open Source versions 1.8.x through 1.8.4.1 Description The issue is related to the SIP channel driver in Asterisk Open Source, where the reqresp parser.c file does not initialize certain strings. This allows remote attackers to cause ...

Asterisk SIP Channel Driver Denial of Service (AST-2011-007)

According to the version in its SIP banner, the version of Asterisk running on the remote host is 1.8.x prior to 1.8.4.2. It, therefore, could be affected by a denial of service vulnerability. If a remote attacker initiates a SIP call and the recipient picks up, the remote user can reply with a...

AST-2011-007

Asterisk Project Security Advisory - AST-2011-007 +------------------------------------------------------------------------+ | Product | Asterisk | |---------------------+--------------------------------------------------| | Summary | Remote Crash Vulnerability in SIP channel driver |...

Asterisk DoS

Crash on processing SIP response headers...

Asterisk SIP Channel Driver Denial of Service (AST-2011-007)

Binary data 5939.prm...

FreeBSD : asterisk -- Remote crash vulnerability (34ce5817-8d56-11e0-b5a2-6c626dd55a41)

The Asterisk Development Team reports : If a remote user initiates a SIP call and the recipient picks up, the remote user can reply with a malformed Contact header that Asterisk will improperly handle and cause a crash due to a segmentation fault. %NASLMINLEVEL 70300 C Tenable Network Security,...

asterisk -- Remote crash vulnerability

The Asterisk Development Team reports: If a remote user initiates a SIP call and the recipient picks up, the remote user can reply with a malformed Contact header that Asterisk will improperly handle and cause a crash due to a segmentation fault...