EUVD-2014-6489

Malware in sbrugna...

DEBIAN-CVE-2014-6610

Asterisk Open Source 11.x before 11.12.1 and 12.x before 12.5.1 and Certified Asterisk 11.6 before 11.6-cert6, when using the resfaxspandsp module, allows remote authenticated users to cause a denial of service crash via an out of call message, which is not properly handled in the ReceiveFax...

CVE-2014-6610

Asterisk Open Source 11.x before 11.12.1 and 12.x before 12.5.1 and Certified Asterisk 11.6 before 11.6-cert6, when using the resfaxspandsp module, allows remote authenticated users to cause a denial of service crash via an out of call message, which is not properly handled in the ReceiveFax...

PT-2014-7300

Name of the Vulnerable Software and Affected Versions Asterisk Open Source versions 11.x through 11.12.0 Asterisk Open Source versions 12.x through 12.4.0 Certified Asterisk versions 11.6 through 11.6-cert5 Description The issue allows remote authenticated users to cause a denial of service crash...

CVE-2014-6610: Undefined Security Weakness

Asterisk Open Source 11.x before 11.12.1 and 12.x before 12.5.1 and Certified Asterisk 11.6 before 11.6-cert6, when using the resfaxspandsp module, allows remote authenticated users to cause a denial of service crash via an out of call message, which is not properly handled in the ReceiveFax...

Asterisk ReceiveFax Dialplan Application Remote DoS (AST-2014-010)

According to the version in its SIP banner, the version of Asterisk running on the remote host is potentially affected by a denial of service vulnerability in the ReceiveFax Dialplan application. This is due to a flaw in the 'resfaxspandsp' module, which is caused by the improper handling of...

asterisk -- Remotely triggered crash

The Asterisk project reports: When an out of call message - delivered by either the SIP or PJSIP channel driver or the XMPP stack - is handled in Asterisk, a crash can occur if the channel servicing the message is sent into the ReceiveFax dialplan application while using the resfaxspandsp module...