CVE-2007-3763

CVE-2007-3763 is an issue in the Asterisk IAX2 channel driver (chan_iax2). The vulnerability is a NULL pointer dereference caused by processing crafted LAGRQ/LAGRP frames containing IAX information elements, which can crash the system and cause a denial of service. Affected products/versions (as ...

CVE-2007-3762

CVE-2007-3762 is a buffer overflow in Asterisk’s IAX2 channel driver (chan_iax2) that could allow remote code execution by sending a long RTP frame. Affected: Asterisk

CVE-2007-3764

CVE-2007-3764 affects the Skinny channel driver (chan_skinny) in Asterisk and related builds (Asterisk 1.2.x/1.4.x, Business Edition, AsteriskNOW, Appliance Developer Kit, s800i). The flaw is triggered by a crafted packet with an incorrect data length value, causing an

CVE-2008-1390

CVE-2008-1390 affects the AsteriskGUI HTTP server as used in Asterisk Open Source 1.4.x (before 1.4.19-rc3) and 1.6.x (before 1.6.0-beta6), plus various bundles. The vulnerability arises from generating insufficiently random manager ID values, which can allow remote attackers to hijack a manager ...

CVE-2008-3264

CVE-2008-3264 describes a DoS via the IAX2 FWDOWNL (firmware download) path in Asterisk and related packages. Affected: Asterisk Open Source 1.0.x, 1.2.x before 1.2.30, 1.4.x before 1.4.21.2; Business Edition A.x.x, B.x.x before B.2.5.4, and C.x.x before C.1.10.3; AsteriskNOW; Appliance Developer...

CVE-2007-4280

The CVE-2007-4280 issue affects the Skinny channel driver (chan_skinny) in Asterisk Open Source before 1.4.10, AsteriskNOW before beta7, Appliance Developer Kit before 0.7.0, and Appliance s800i before 1.0.3. The vulnerability arises when processing a CAPABILITIES_RES_MESSAGE packet containing a ...

CVE-2007-4455

The CVE-2007-4455 issue affects the SIP channel driver (chan_sip) in Asterisk Open Source 1.4.x up to 1.4.11, AsteriskNOW up to beta7, Asterisk Appliance Developer Kit 0.x up to 0.8.0, and s800i (Asterisk Appliance) up to 1.0.3. The vulnerability allows remote attackers to cause a denial of servi...

CVE-2008-0095

Asterisk Open Source 1.4.x (and related editions) is affected by a remote DoS via a crafted BYE message containing an Also header, triggering a NULL pointer dereference and daemon crash. The vulnerable range includes 1.4.x before 1.4.17, with affected builds in Business Edition before C.1.0-beta8...

CVE-2007-3765

The CVE-2007-3765 entry corresponds to a remote crash vulnerability in Asterisk’s STUN implementation. Affected are Asterisk Open Source 1.4.x before 1.4.8, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2. The flaw arises when parsing inbound STUN attributes...