CVE-2018-10990

The CVE-2018-10990 entry affects Arris Touchstone Telephony Gateway TG1682G (version 9.1.103J6). The vulnerability arises because a logout action does not immediately destroy all state related to the validity of the credential cookie, potentially allowing an attacker to retain access for some min...

Apple iOS Telephony Buffer Overflow Vulnerability

Apple iOS is an operating system developed by Apple Inc. for mobile devices.APNs are a component of the push notification service.Telephony is a component that provides telephony functionality. A buffer overflow vulnerability exists in the Telephony component in Apple iOS versions prior to 11.3. ...

Apple iOS Telephony Denial of Service Vulnerability

Apple iOS is an operating system developed by Apple Inc. for mobile devices.APNs are a component of the push notification service.Telephony is a component that provides telephony capabilities. A security vulnerability exists in the Telephony component in Apple iOS versions prior to 11.3. A remote...

CVE-2018-4148

An issue was discovered in certain Apple products. iOS before 11.3 is affected. The issue involves the "Telephony" component. A buffer overflow allows remote attackers to execute arbitrary code...

CVE-2018-4148

An issue was discovered in certain Apple products. iOS before 11.3 is affected. The issue involves the "Telephony" component. A buffer overflow allows remote attackers to execute arbitrary code...

CVE-2018-4140

An issue was discovered in certain Apple products. iOS before 11.3 is affected. The issue involves the "Telephony" component. It allows remote attackers to cause a denial of service NULL pointer dereference and reboot via a Class 0 SMS message...

CVE-2018-4140

An issue was discovered in certain Apple products. iOS before 11.3 is affected. The issue involves the "Telephony" component. It allows remote attackers to cause a denial of service NULL pointer dereference and reboot via a Class 0 SMS message...

Buffer overflow

An issue was discovered in certain Apple products. iOS before 11.3 is affected. The issue involves the "Telephony" component. A buffer overflow allows remote attackers to execute arbitrary code...

Null pointer dereference

An issue was discovered in certain Apple products. iOS before 11.3 is affected. The issue involves the "Telephony" component. It allows remote attackers to cause a denial of service NULL pointer dereference and reboot via a Class 0 SMS message...

CVE-2018-4140

An issue was discovered in certain Apple products. iOS before 11.3 is affected. The issue involves the "Telephony" component. It allows remote attackers to cause a denial of service NULL pointer dereference and reboot via a Class 0 SMS message...

CVE-2018-4148

An issue was discovered in certain Apple products. iOS before 11.3 is affected. The issue involves the "Telephony" component. A buffer overflow allows remote attackers to execute arbitrary code...

CVE-2018-4140

CVE-2018-4140 affects Apple iOS before 11.3, in the Telephony component. A remote attacker can trigger a NULL pointer dereference via a Class 0 SMS , causing the device to reboot (DoS). The issue is fixed in iOS 11.3; remediation is to upgrade to iOS 11.3 or later per Apple’s security content ent...

Intelbras TELEFONE IP TIP200/200 LITE Path Traversal Vulnerability

Intelbras TELEFONE IP TIP200/200 LITE is an IP telephony product from Intelbras Brazil. A security vulnerability exists in Intelbras TELEFONE IP TIP200/200 LITE version 60.0.75.29. A remote attacker can exploit the vulnerability by sending the 'page' parameter to the file /cgi-bin/cgiServer.exx t...

Asterisk 15.x < 15.2.2 Multiple Vulnerabilities (AST-2018-001 - AST-2018-006)

According to its SIP banner, the version of Asterisk running on the remote host is 15.x prior to 15.2.2. It is therefore, affected by multiple vulnerabilities as described in AST-2018-001, AST-2018-002, AST-2018-003, AST-2018-004, AST-2018-005, & AST-2018-006 advisories. Note that Nessus has not...

Asterisk 13.17.2 - 'chan_skinny' Remote Memory Corruption

Exploit Author: Juan Sacco - http://exploitpack.com Vulnerability found using Exploit Pack v10 - Fuzzer module CVE-2017-17090 - AST-2017-013 Tested on: Asterisk 13.17.2dfsg-2 Description: Asterisk is prone to a remote unauthenticated memory exhaustion The vulnerability is due to an error when the...

[SECURITY] Fedora 27 Update: asterisk-14.7.5-1.fc27

Asterisk is a complete PBX in software. It runs on Linux and provides all of the features you would expect from a PBX and more. Asterisk does voice over IP in three protocols, and can interoperate with almost all standards-based telephony equipment using relatively inexpensive hardware...

Debian DLA-1225-1 : asterisk security update

A vulnerability has been discovered in Asterisk, an open source PBX and telephony toolkit, which may result in resource exhaustion and denial of service. CVE-2017-17090: memory leak from chanskinny. If the chanskinny AKA SCCP protocol channel driver is flooded with certain requests it can cause t...

Debian DSA-4076-1 : asterisk - security update

Multiple vulnerabilities have been discovered in Asterisk, an open source PBX and telephony toolkit, which may result in denial of service, information disclosure and potentially the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

[SECURITY] [DSA 4076-1] asterisk security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4076-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 30, 2017 https://www.debian.org/security/faq -...

Debian: Security Advisory (DSA-4076-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...