4548 matches found
CVE-2011-2578
CVE-2011-2578 describes a memory leak in Cisco IOS 15.1 and 15.2 that can be triggered by malformed SIP packets on a NAT interface, allowing remote attackers to cause a denial of service (memory consumption). This vulnerability is associated with Bug ID CSCts12366. The available references confir...
DEBIAN-CVE-2012-2416
chansip.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.11.1 and 10.x before 10.3.1 and Asterisk Business Edition C.3.x before C.3.7.4, when the trustrpid option is enabled, allows remote authenticated users to cause a denial of service daemon crash by sending a SIP UPDATE...
CVE-2012-2416
chansip.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.11.1 and 10.x before 10.3.1 and Asterisk Business Edition C.3.x before C.3.7.4, when the trustrpid option is enabled, allows remote authenticated users to cause a denial of service daemon crash by sending a SIP UPDATE...
CVE-2012-2416
chansip.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.11.1 and 10.x before 10.3.1 and Asterisk Business Edition C.3.x before C.3.7.4, when the trustrpid option is enabled, allows remote authenticated users to cause a denial of service daemon crash by sending a SIP UPDATE...
CVE-2012-2416
chansip.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.11.1 and 10.x before 10.3.1 and Asterisk Business Edition C.3.x before C.3.7.4, when the trustrpid option is enabled, allows remote authenticated users to cause a denial of service daemon crash by sending a SIP UPDATE...
Code injection
chansip.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.11.1 and 10.x before 10.3.1 and Asterisk Business Edition C.3.x before C.3.7.4, when the trustrpid option is enabled, allows remote authenticated users to cause a denial of service daemon crash by sending a SIP UPDATE...
CVE-2012-2416
chansip.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.11.1 and 10.x before 10.3.1 and Asterisk Business Edition C.3.x before C.3.7.4, when the trustrpid option is enabled, allows remote authenticated users to cause a denial of service daemon crash by sending a SIP UPDATE...
CVE-2012-2416
chansip.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.11.1 and 10.x before 10.3.1 and Asterisk Business Edition C.3.x before C.3.7.4, when the trustrpid option is enabled, allows remote authenticated users to cause a denial of service daemon crash by sending a SIP UPDATE...
CVE-2012-2416
CVE-2012-2416 affects Asterisk Open Source 1.8.x prior to 1.8.11.1 and 10.x prior to 10.3.1, plus Asterisk Business Edition C.3.x prior to C.3.7.4, where enabling trustrpid lets remote authenticated users crash the daemon via SIP UPDATE triggering a connected-line update without an associated cha...
Asterisk Heap-Based Buffer Overflow in Skinny Channel Driver (AST-2012-005)
According to the version in its SIP banner, the version of Asterisk running on the remote host is potentially affected by a vulnerability that could allow a remote attacker to crash the server, or possibly inject arbitrary code by sending repeated KEYPADBUTTONMESSAGE events over a Skinny channel ...
Asterisk Remote Crash Vulnerability in SIP Channel Driver (AST-2012-006)
According to the version in its SIP banner, the version of Asterisk running on the remote host is potentially affected by a vulnerability that could allow a remote attacker to crash the server. This issue could be exploited by sending an UPDATE over a SIP channel after the channel dialog has been...
AST-2012-006: Remote Crash Vulnerability in SIP Channel Driver
Asterisk Project Security Advisory - AST-2012-006 Product Asterisk Summary Remote Crash Vulnerability in SIP Channel Driver Nature of Advisory Remote Crash Susceptibility Remote Authenticated Sessions Severity Moderate Exploits Known No Reported On April 16, 2012 Reported By Thomas Arimont Posted...
Asterisk multiple security vulnerabilities
Buffer overflow on Skinny processing, DoS via SIP, Asterisk Manager code execution...
asterisk -- multiple vulnerabilities
Asterisk project reports: Remote Crash Vulnerability in SIP Channel Driver Heap Buffer Overflow in Skinny Channel Driver Asterisk Manager User Unauthorized Shell Access...
Phone based denial-of-service (DoS) attack on MI6 Anti-terrorism Agency
Phone based denial-of-service DoS attack on MI6 Anti-terrorism Agency +attack+on+MI6+Anti-terrorism+Agency.jpg The Hacking group, 'TeaMp0isoN' said they targeted counter-terrorism officers at MI6 with a barrage of phone calls for a period of 24 hours, which meant nobody else could get through. By...
Cisco Security Advisory: Cisco IOS Software Network Address Translation Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Cisco IOS Software Network Address Translation Vulnerability Advisory ID: cisco-sa-20120328-nat Revision 1.0 For Public Release 2012 March 28 16:00 UTC GMT +-------------------------------------------------------------------...
Cisco IOS Software Network Address Translation Vulnerability (cisco-sa-20120328-nat)
The Cisco IOS Software Network Address Translation NAT feature contains a denial of service DoS vulnerability in the translation of Session Initiation Protocol SIP packets. The vulnerability is caused when packets in transit on the vulnerable device require translation on the SIP payload. Cisco h...
CVE-2012-1315
Memory leak in the SIP inspection feature in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service memory consumption or device reload via crafted transit SIP traffic, aka Bug ID CSCti46171...
CVE-2012-0383
Memory leak in the NAT feature in Cisco IOS 12.4, 15.0, and 15.1 allows remote attackers to cause a denial of service memory consumption, and device hang or reload via SIP packets that require translation, related to a "memory starvation vulnerability," aka Bug ID CSCti35326...
Memory corruption
Memory leak in the NAT feature in Cisco IOS 12.4, 15.0, and 15.1 allows remote attackers to cause a denial of service memory consumption, and device hang or reload via SIP packets that require translation, related to a "memory starvation vulnerability," aka Bug ID CSCti35326...