Gentoo Security Advisory GLSA 201110-21 (Asterisk)

The remote host is missing updates announced in advisory GLSA 201110-21. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

CVE-2011-2665

reqrespparser.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.4.3 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a SIP packet with a Contact header that lacks a less than character...

CVE-2011-2665

Summary: CVE-2011-2665 affects Asterisk Open Source 1.8.x prior to 1.8.4.3. The SIP channel driver’s reqresp_parser.c contains a flaw where a SIP packet with a Contact header lacking a left angle bracket (