Asterisk SIP Channel Driver Invalid SDP Denial of Service (AST-2013-005)

According to the version in its SIP banner, the version of Asterisk running on the remote host is potentially affected by a denial of service vulnerability. The application does not properly handle an invalid SDP in a SIP request if such a request defines media descriptions and then defines...

[SECURITY] [DSA 2749-1] asterisk security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2749-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff September 02, 2013 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2749-1 (asterisk - several vulnerabilities)

Colin Cuthbertson and Walter Doekes discovered two vulnerabilities in the SIP processing code of Asterisk - an open source PBX and telephony toolkit -, which could result in denial of service. OpenVAS Vulnerability Test $Id: deb2749.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generated from...

Mandriva Linux Security Advisory : asterisk (MDVSA-2013:223)

Updated asterisk packages fix security vulnerabilities : A remotely exploitable crash vulnerability exists in the SIP channel driver if an ACK with SDP is received after the channel has been terminated. The handling code incorrectly assumes that the channel will always be present CVE-2013-5641. A...

DSA-2749-1 asterisk - several

Bulletin has no description...

Debian: Security Advisory (DSA-2749-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Design/Logic Flaw

The App-ID cache feature in Palo Alto Networks PAN-OS before 4.0.14, 4.1.x before 4.1.11, and 5.0.x before 5.0.2 allows remote attackers to bypass intended security policies via crafted requests that trigger invalid caching, as demonstrated by incorrect identification of HTTP traffic as SIP...

CVE-2013-5663

The App-ID cache feature in Palo Alto Networks PAN-OS before 4.0.14, 4.1.x before 4.1.11, and 5.0.x before 5.0.2 allows remote attackers to bypass intended security policies via crafted requests that trigger invalid caching, as demonstrated by incorrect identification of HTTP traffic as SIP...

MGASA-2013-0266 Updated asterisk package fixes security vulnerabilities

A remotely exploitable crash vulnerability exists in the SIP channel driver if an ACK with SDP is received after the channel has been terminated. The handling code incorrectly assumes that the channel will always be present CVE-2013-5641. A remotely exploitable crash vulnerability exists in the S...

Updated asterisk package fixes security vulnerabilities

A remotely exploitable crash vulnerability exists in the SIP channel driver if an ACK with SDP is received after the channel has been terminated. The handling code incorrectly assumes that the channel will always be present CVE-2013-5641. A remotely exploitable crash vulnerability exists in the S...

FreeBSD : asterisk -- multiple vulnerabilities (fd2bf3b5-1001-11e3-ba94-0025905a4771)

The Asterisk project reports : Remote Crash From Late Arriving SIP ACK With SDP Remote Crash when Invalid SDP is sent in SIP Request %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyrig...

asterisk -- multiple vulnerabilities

The Asterisk project reports: Remote Crash From Late Arriving SIP ACK With SDP Remote Crash when Invalid SDP is sent in SIP Request...

CVE-2013-3461

Cisco Unified Communications Manager Unified CM 8.5x and 8.6x before 8.62asu3 and 9.x before 9.11 does not properly restrict the rate of SIP packets, which allows remote attackers to cause a denial of service memory and CPU consumption, and service disruption via a flood of UDP packets to port...

CVE-2013-3461

Cisco Unified Communications Manager Unified CM 8.5x and 8.6x before 8.62asu3 and 9.x before 9.11 does not properly restrict the rate of SIP packets, which allows remote attackers to cause a denial of service memory and CPU consumption, and service disruption via a flood of UDP packets to port...

Cisco Patches DoS, Buffer Overflow Vulnerabilities in UCM

Cisco has again pushed out an update for its Unified Communications Manager product, fixing several vulnerabilities that if left unpatched could lead to a denial of service attack, allow attackers to modify data or execute arbitrary commands, among other problems. The problems exist in versions...

Fedora Update for twinkle FEDORA-2013-13018

Check for the Version of twinkle OpenVAS Vulnerability Test Fedora Update for twinkle FEDORA-2013-13018 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for twinkle FEDORA-2013-13019

Check for the Version of twinkle OpenVAS Vulnerability Test Fedora Update for twinkle FEDORA-2013-13019 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

[SECURITY] Fedora 17 Update: twinkle-1.4.2-19.fc17.1

Twinkle is a SIP based soft phone for making telephone calls over IP networ ks...

[SECURITY] Fedora 18 Update: twinkle-1.4.2-19.fc18.1

Twinkle is a SIP based soft phone for making telephone calls over IP networ ks...

Cisco TelePresence CVE-2013-3378 Software Malformed SIP Packet Handling Remote DoS

According to the self-reported version returned by the SNMP service on the remote device, it is affected by a denial of service vulnerability that can be triggered by sending a specially crafted SIP packet. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid69049;...