4 matches found
Asterisk 17.6.0 / 17.5.1 Denial Of Service
Asterisk crash due to INVITE flood over TCP - Fixed versions: 13.37.1, 16.14.1, 17.8.1, 18.0.1 - Enable Security Advisory: https://github.com/EnableSecurity/advisories/tree/master/ES2020-02-asterisk-tcp-invite-crash - Asterisk Security Advisory:...
CVE-2014-8413
The respjsipacl module in Asterisk Open Source 12.x before 12.7.1 and 13.x before 13.0.1 does not properly create and load ACLs defined in pjsip.conf at startup, which allows remote attackers to bypass intended PJSIP ACL rules...
CVE-2014-8413
The respjsipacl module in Asterisk Open Source 12.x before 12.7.1 and 13.x before 13.0.1 does not properly create and load ACLs defined in pjsip.conf at startup, which allows remote attackers to bypass intended PJSIP ACL rules...
CVE-2014-8413
The CVE-2014-8413 issue affects Asterisk Open Source 12.x (before 12.7.1) and 13.x (before 13.0.1). The res_pjsip_acl module does not properly create/load ACLs defined in pjsip.conf at startup, allowing remote attackers to bypass intended PJSIP ACL rules. Impact is remote, unauthenticated access ...