CVE-2007-3763

CVE-2007-3763 is an issue in the Asterisk IAX2 channel driver (chan_iax2). The vulnerability is a NULL pointer dereference caused by processing crafted LAGRQ/LAGRP frames containing IAX information elements, which can crash the system and cause a denial of service. Affected products/versions (as ...

CVE-2007-3762

CVE-2007-3762 is a buffer overflow in Asterisk’s IAX2 channel driver (chan_iax2) that could allow remote code execution by sending a long RTP frame. Affected: Asterisk

CVE-2007-3764

CVE-2007-3764 affects the Skinny channel driver (chan_skinny) in Asterisk and related builds (Asterisk 1.2.x/1.4.x, Business Edition, AsteriskNOW, Appliance Developer Kit, s800i). The flaw is triggered by a crafted packet with an incorrect data length value, causing an

CVE-2009-0041

CVE-2009-0041 affects Asterisk Open Source (IAX2) across multiple branches (1.2.x, 1.4.x, 1.6.x and related Business Edition lines) and allows remote attackers to enumerate valid usernames by differing responses to login attempts. The Debian advisory (DSA-1952-1) lists CVE-2009-0041 among several...

CVE-2007-3765

The CVE-2007-3765 entry corresponds to a remote crash vulnerability in Asterisk’s STUN implementation. Affected are Asterisk Open Source 1.4.x before 1.4.8, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2. The flaw arises when parsing inbound STUN attributes...