EUVD-2014-8253

Malware in sbrugna...

Asterisk PJSIP Multiple Vulnerabilities (AST-2014-013 / AST-2014-015 / AST-2014-016)

According to the version in its SIP banner, the version of Asterisk running on the remote host is potentially affected by the following vulnerabilities in the PJSIP channel driver : - A security bypass vulnerability exists due to a flaw in the 'respjsipacl' module which may allow a remote attacke...

Design/Logic Flaw

Use-after-free vulnerability in the PJSIP channel driver in Asterisk Open Source 12.x before 12.7.1 and 13.x before 13.0.1, when using the respjsiprefer module, allows remote attackers to cause a denial of service crash via an in-dialog INVITE with Replaces message, which triggers the channel to ...

CVE-2014-8416

Use-after-free vulnerability in the PJSIP channel driver in Asterisk Open Source 12.x before 12.7.1 and 13.x before 13.0.1, when using the respjsiprefer module, allows remote attackers to cause a denial of service crash via an in-dialog INVITE with Replaces message, which triggers the channel to ...