Linux Distros Unpatched Vulnerability : CVE-2016-2316

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - chansip in Asterisk Open Source 1.8.x, 11.x before 11.21.1, 12.x, and 13.x before 13.7.1 and Certified Asterisk 1.8.28, 11.6 before 11.6-cert12, and 13.1 before...

The vulnerability of the Asterisk IP-telephony management system, as well as the Certified Asterisk IP-telephony management system, allows a perpetrator to trigger a service failure.

The vulnerability of the chansip function in IP-telephony management systems of Certified Asterisk and Asterisk is related to the setting of the timert1 sip.conf value, which exceeds 1245. Exploiting this vulnerability allows a malicious actor to cause a service failure exhaustion of file...

MGASA-2016-0086 Updated asterisk packages fix CVE-2016-2316

Updated asterisk packages fix security vulnerability: chansip in Asterisk Open Source 11.x before 11.21.1, when the timert1 sip.conf configuration is set to a value greater than 1245, allows remote attackers to cause a denial of service file descriptor consumption via vectors related to large...

DEBIAN-CVE-2016-2316

chansip in Asterisk Open Source 1.8.x, 11.x before 11.21.1, 12.x, and 13.x before 13.7.1 and Certified Asterisk 1.8.28, 11.6 before 11.6-cert12, and 13.1 before 13.1-cert3, when the timert1 sip.conf configuration is set to a value greater than 1245, allows remote attackers to cause a denial of...

UBUNTU-CVE-2016-2316

chansip in Asterisk Open Source 1.8.x, 11.x before 11.21.1, 12.x, and 13.x before 13.7.1 and Certified Asterisk 1.8.28, 11.6 before 11.6-cert12, and 13.1 before 13.1-cert3, when the timert1 sip.conf configuration is set to a value greater than 1245, allows remote attackers to cause a denial of...

CVE-2016-2316

chansip in Asterisk Open Source 1.8.x, 11.x before 11.21.1, 12.x, and 13.x before 13.7.1 and Certified Asterisk 1.8.28, 11.6 before 11.6-cert12, and 13.1 before 13.1-cert3, when the timert1 sip.conf configuration is set to a value greater than 1245, allows remote attackers to cause a denial of...

CVE-2016-2316

CVE-2016-2316 affects Asterisk Open Source and Certified Asterisk: chan_sip allows remote denial of service when timert1 in sip.conf > 1245, via large retransmit timeout values. Affected: Asterisk 1.8.x; 11.x before 11.21.1; 12.x; 13.x before 13.7.1; Certified Asterisk 1.8.28; 11.6 before 11.6...

PT-2016-1592

Name of the Vulnerable Software and Affected Versions Asterisk Open Source versions 1.8.x through 11.21.1, 12.x, and 13.x through 13.7.1 Certified Asterisk versions 1.8.28, 11.6 through 11.6-cert12, and 13.1 through 13.1-cert3 Description The issue is related to the chan sip function in Asterisk...

CVE-2016-2316: Integer Underflow (Wrap or Wraparound)

chansip in Asterisk Open Source 1.8.x, 11.x before 11.21.1, 12.x, and 13.x before 13.7.1 and Certified Asterisk 1.8.28, 11.6 before 11.6-cert12, and 13.1 before 13.1-cert3, when the timert1 sip.conf configuration is set to a value greater than 1245, allows remote attackers to cause a denial of...