Cisco Adaptive Security Appliance Software SIP Inspection Memory Leak Vulnerability

A vulnerability in the Session Initiation Protocol SIP inspection engine code could allow an unauthenticated, remote attacker to cause a slow memory leak, which may cause instability on the affected system. The vulnerability is due to improper handling of SIP packets inspected by the Cisco Adapti...

CVE-2014-2154

Memory leak in the SIP inspection engine in Cisco Adaptive Security Appliance ASA Software allows remote attackers to cause a denial of service memory consumption and instability via crafted SIP packets, aka Bug ID CSCuf67469...

Memory corruption

Memory leak in the SIP inspection engine in Cisco Adaptive Security Appliance ASA Software allows remote attackers to cause a denial of service memory consumption and instability via crafted SIP packets, aka Bug ID CSCuf67469...

CVE-2014-2154

Cisco ASA Software SIP inspection engine memory leak vulnerability (CVE-2014-2154) allows remote, unauthenticated attackers to exhaust memory and cause instability/DoS by sending crafted SIP packets. Root cause: improper SIP packet handling in the SIP inspection engine. Impact: partial DoS due to...

CVE-2014-2154

Memory leak in the SIP inspection engine in Cisco Adaptive Security Appliance ASA Software allows remote attackers to cause a denial of service memory consumption and instability via crafted SIP packets, aka Bug ID CSCuf67469...

DEBIAN-CVE-2014-2287

channels/chansip.c in Asterisk Open Source 1.8.x before 1.8.26.1, 11.8.x before 11.8.1, and 12.1.x before 12.1.1, and Certified Asterisk 1.8.15 before 1.8.15-cert5 and 11.6 before 11.6-cert2, when chansip has a certain configuration, allows remote authenticated users to cause a denial of service...

Design/Logic Flaw

channels/chansip.c in Asterisk Open Source 1.8.x before 1.8.26.1, 11.8.x before 11.8.1, and 12.1.x before 12.1.1, and Certified Asterisk 1.8.15 before 1.8.15-cert5 and 11.6 before 11.6-cert2, when chansip has a certain configuration, allows remote authenticated users to cause a denial of service...

CVE-2014-2287

channels/chansip.c in Asterisk Open Source 1.8.x before 1.8.26.1, 11.8.x before 11.8.1, and 12.1.x before 12.1.1, and Certified Asterisk 1.8.15 before 1.8.15-cert5 and 11.6 before 11.6-cert2, when chansip has a certain configuration, allows remote authenticated users to cause a denial of service...

Mandriva Linux Security Advisory : asterisk (MDVSA-2014:078)

Multiple vulnerabilities has been discovered and corrected in asterisk : Sending a HTTP request that is handled by Asterisk with a large number of Cookie headers could overflow the stack. You could even exhaust memory if you sent an unlimited number of headers in the request CVE-2014-2286. An...

Updated asterisk packages fix security vulnerabilities

Updated asterisk packages fix security vulnerabilities: In Asterisk before 11.8.1, sending a HTTP request that is handled by Asterisk with a large number of Cookie headers could overflow the stack. You could even exhaust memory if you sent an unlimited number of headers in the request...

Updated asterisk packages fix security vulnerabilities

Updated asterisk packages fix security vulnerabilities: In Asterisk before 11.6.1, a 16 bit SMS message that contains an odd message length value will cause the message decoding loop to run forever. The message buffer is not on the stack but will be overflowed resulting in corrupted memory and an...

MGASA-2014-0172 Updated asterisk packages fix security vulnerabilities

Updated asterisk packages fix security vulnerabilities: In Asterisk before 11.8.1, sending a HTTP request that is handled by Asterisk with a large number of Cookie headers could overflow the stack. You could even exhaust memory if you sent an unlimited number of headers in the request...

Cisco ASA Software Multiple Vulnerabilities (cisco-sa-20140409-asa)

The remote Cisco ASA device is affected by one or more of the following vulnerabilities : - An issue exists in the Adaptive Security Device Manager ADSM due to improper privilege assignment to users with a privilege level of zero. This issue allows an authenticated, remote attacker to gain...

CVE-2014-2129

The SIP inspection engine in Cisco Adaptive Security Appliance ASA Software 8.2 before 8.25.48, 8.4 before 8.46.5, 9.0 before 9.03.1, and 9.1 before 9.12.5 allows remote attackers to cause a denial of service memory consumption or device reload via crafted SIP packets, aka Bug ID CSCuh44052...

Code injection

The SIP inspection engine in Cisco Adaptive Security Appliance ASA Software 8.2 before 8.25.48, 8.4 before 8.46.5, 9.0 before 9.03.1, and 9.1 before 9.12.5 allows remote attackers to cause a denial of service memory consumption or device reload via crafted SIP packets, aka Bug ID CSCuh44052...

CVE-2014-2129

CVE-2014-2129 affects Cisco ASA Software SIP inspection engine. Affected versions are ASA 8.2 before 8.2(5.48), 8.4 before 8.4(6.5), 9.0 before 9.0(3.1), and 9.1 before 9.1(2.5). The vulnerability allows remote attackers to trigger a denial of service via crafted SIP packets, leading to memory ex...

CVE-2014-2129

The SIP inspection engine in Cisco Adaptive Security Appliance ASA Software 8.2 before 8.25.48, 8.4 before 8.46.5, 9.0 before 9.03.1, and 9.1 before 9.12.5 allows remote attackers to cause a denial of service memory consumption or device reload via crafted SIP packets, aka Bug ID CSCuh44052...

Multiple Vulnerabilities in Cisco ASA Software

Cisco Adaptive Security Appliance ASA Software is affected by the following vulnerabilities: Cisco ASA ASDM Privilege Escalation Vulnerability Cisco ASA SSL VPN Privilege Escalation Vulnerability Cisco ASA SSL VPN Authentication Bypass Vulnerability Cisco ASA SIP Denial of Service Vulnerability...

PT-2014-1323 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software versions 8.2 before 8.25.48 Cisco Adaptive Security Appliance ASA Software versions 8.4 before 8.46.5 Cisco Adaptive Security Appliance ASA Software versions 9.0 before 9.03.1 Cisco Adaptive...

Cisco IOS Software Session Initiation Protocol Denial of Service (cisco-sa-20140326-sip)

According to its self-reported version, the version of Cisco IOS running on the remote host is affected by a denial of service vulnerability in the Session Initiation Protocol SIP implementation. An unauthenticated, remote attacker could potentially exploit this issue to cause a denial of service...