Asterisk SIP通道驱动应答零代码远程拒绝服务漏洞

2007-03-24T00:00:00
ID SSV:1535
Type seebug
Reporter Root
Modified 2007-03-24T00:00:00

Description

Asterisk是一个开放源代码的软件VoIP PBX系统。

Asterisk处理包含code 0的应答消息存在问题,远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。

从远程系统接收到部分SIP应答(如SIP Response code 0),可导致Asterisk崩溃,造成拒绝服务攻击。

Asterisk Asterisk 1.4.1 Asterisk Asterisk 1.2.16 Asterisk Asterisk 1.2.15 Asterisk Asterisk 1.2.14 Asterisk Asterisk 1.2.13 Asterisk Asterisk 1.2.11 Asterisk Asterisk 1.2.11 Asterisk Asterisk 1.2.10 Asterisk Asterisk 1.2.9 Asterisk Asterisk 1.2.8 Asterisk Asterisk 1.2.7 Asterisk Asterisk 1.2.6 Asterisk Asterisk 1.2.5 Asterisk Asterisk 1.2 .0-beta2 Asterisk Asterisk 1.2 .0-beta1 Asterisk Asterisk 1.0.12 Asterisk Asterisk 1.0.11 Asterisk Asterisk 1.0.10 Asterisk Asterisk 1.0.9 Asterisk Asterisk 1.0.8 Asterisk Asterisk 1.0.7 Asterisk Asterisk 1.0.6 Asterisk Asterisk 1.0 Asterisk Asterisk 0.9 .0 Asterisk Asterisk 0.7.2 Asterisk Asterisk 0.7.1 Asterisk Asterisk 0.7 .0 Asterisk Asterisk 0.4 Asterisk Asterisk 0.3 Asterisk Asterisk 0.2 Asterisk Asterisk 0.1.11 Asterisk Asterisk 0.1.9 -1 Asterisk Asterisk 0.1.9 Asterisk Asterisk 0.1.8 Asterisk Asterisk 0.1.7 Asterisk Asterisk 1.4 Beta

厂商解决方案

升级程序:

Asterisk Asterisk 1.4 Beta

* Asterisk asterisk-1.4.2.tar.gz
  <a href="http://ftp.digium.com/pub/asterisk/releases/asterisk-1.4.2.tar.gz" target="_blank">http://ftp.digium.com/pub/asterisk/releases/asterisk-1.4.2.tar.gz</a>

Asterisk Asterisk 0.1.11

* Asterisk asterisk-1.2.17.tar.gz
  <a href="http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.17.tar.gz" target="_blank">http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.17.tar.gz</a>

Asterisk Asterisk 0.1.7

* Asterisk asterisk-1.2.17.tar.gz
  <a href="http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.17.tar.gz" target="_blank">http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.17.tar.gz</a>

Asterisk Asterisk 0.1.8

* Asterisk asterisk-1.2.17.tar.gz
  <a href="http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.17.tar.gz" target="_blank">http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.17.tar.gz</a>

Asterisk Asterisk 0.1.9

* Asterisk asterisk-1.2.17.tar.gz
  <a href="http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.17.tar.gz" target="_blank">http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.17.tar.gz</a>

Asterisk Asterisk 0.1.9 -1

* Asterisk asterisk-1.2.17.tar.gz
  <a href="http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.17.tar.gz" target="_blank">http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.17.tar.gz</a>

Asterisk Asterisk 0.2

* Asterisk asterisk-1.2.17.tar.gz
  <a href="http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.17.tar.gz" target="_blank">http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.17.tar.gz</a>

Asterisk Asterisk 0.3

* Asterisk asterisk-1.2.17.tar.gz
  <a href="http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.17.tar.gz" target="_blank">http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.17.tar.gz</a>

Asterisk Asterisk 0.4

* Asterisk asterisk-1.2.17.tar.gz
  <a href="http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.17.tar.gz" target="_blank">http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.17.tar.gz</a>

Asterisk Asterisk 0.7 .0

* Asterisk asterisk-1.2.17.tar.gz
  <a href="http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.17.tar.gz" target="_blank">http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.17.tar.gz</a>

Asterisk Asterisk 0.7.1

* Asterisk asterisk-1.2.17.tar.gz
  <a href="http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.17.tar.gz" target="_blank">http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.17.tar.gz</a>

Asterisk Asterisk 0.7.2

* Asterisk asterisk-1.2.17.tar.gz
  <a href="http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.17.tar.gz" target="_blank">http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.17.tar.gz</a>

Asterisk Asterisk 0.9 .0

* Asterisk asterisk-1.2.17.tar.gz
  <a href="http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.17.tar.gz" target="_blank">http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.17.tar.gz</a>

Asterisk Asterisk 1.0

* Asterisk asterisk-1.2.17.tar.gz
  <a href="http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.17.tar.gz" target="_blank">http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.17.tar.gz</a>

Asterisk Asterisk 1.0.10

* Asterisk asterisk-1.2.17.tar.gz
  <a href="http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.17.tar.gz" target="_blank">http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.17.tar.gz</a>

Asterisk Asterisk 1.0.11

* Asterisk asterisk-1.2.17.tar.gz
  <a href="http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.17.tar.gz" target="_blank">http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.17.tar.gz</a>

Asterisk Asterisk 1.0.12

* Asterisk asterisk-1.2.17.tar.gz
  <a href="http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.17.tar.gz" target="_blank">http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.17.tar.gz</a>

Asterisk Asterisk 1.0.6

* Asterisk asterisk-1.2.17.tar.gz
  <a href="http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.17.tar.gz" target="_blank">http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.17.tar.gz</a>

Asterisk Asterisk 1.0.7

* Asterisk asterisk-1.2.17.tar.gz
  <a href="http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.17.tar.gz" target="_blank">http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.17.tar.gz</a>

Asterisk Asterisk 1.0.8

* Asterisk asterisk-1.2.17.tar.gz
  <a href="http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.17.tar.gz" target="_blank">http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.17.tar.gz</a>

Asterisk Asterisk 1.0.9

* Asterisk asterisk-1.2.17.tar.gz
  <a href="http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.17.tar.gz" target="_blank">http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.17.tar.gz</a>

Asterisk Asterisk 1.2 .0-beta1

* Asterisk asterisk-1.2.17.tar.gz
  <a href="http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.17.tar.gz" target="_blank">http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.17.tar.gz</a>

Asterisk Asterisk 1.2 .0-beta2

* Asterisk asterisk-1.2.17.tar.gz
  <a href="http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.17.tar.gz" target="_blank">http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.17.tar.gz</a>

Asterisk Asterisk 1.2.10

* Asterisk asterisk-1.2.17.tar.gz
  <a href="http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.17.tar.gz" target="_blank">http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.17.tar.gz</a>

Asterisk Asterisk 1.2.11

* Asterisk asterisk-1.2.17.tar.gz
  <a href="http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.17.tar.gz" target="_blank">http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.17.tar.gz</a>

Asterisk Asterisk 1.2.11

* Asterisk asterisk-1.2.17.tar.gz
  <a href="http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.17.tar.gz" target="_blank">http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.17.tar.gz</a>

Asterisk Asterisk 1.2.13

* Asterisk asterisk-1.2.17.tar.gz
  <a href="http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.17.tar.gz" target="_blank">http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.17.tar.gz</a>

Asterisk Asterisk 1.2.14

* Asterisk asterisk-1.2.17.tar.gz
  <a href="http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.17.tar.gz" target="_blank">http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.17.tar.gz</a>

Asterisk Asterisk 1.2.15

* Asterisk asterisk-1.2.17.tar.gz
  <a href="http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.17.tar.gz" target="_blank">http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.17.tar.gz</a>

Asterisk Asterisk 1.2.16

* Asterisk asterisk-1.2.17.tar.gz
  <a href="http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.17.tar.gz" target="_blank">http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.17.tar.gz</a>

Asterisk Asterisk 1.2.5

* Asterisk asterisk-1.2.17.tar.gz
  <a href="http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.17.tar.gz" target="_blank">http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.17.tar.gz</a>

Asterisk Asterisk 1.2.6

* Asterisk asterisk-1.2.17.tar.gz
  <a href="http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.17.tar.gz" target="_blank">http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.17.tar.gz</a>

Asterisk Asterisk 1.2.7

* Asterisk asterisk-1.2.17.tar.gz
  <a href="http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.17.tar.gz" target="_blank">http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.17.tar.gz</a>

Asterisk Asterisk 1.2.8

* Asterisk asterisk-1.2.17.tar.gz
  <a href="http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.17.tar.gz" target="_blank">http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.17.tar.gz</a>

Asterisk Asterisk 1.2.9

* Asterisk asterisk-1.2.17.tar.gz
  <a href="http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.17.tar.gz" target="_blank">http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.17.tar.gz</a>

Asterisk Asterisk 1.4.1

* Asterisk asterisk-1.4.2.tar.gz
  <a href="http://ftp.digium.com/pub/asterisk/releases/asterisk-1.4.2.tar.gz" target="_blank">http://ftp.digium.com/pub/asterisk/releases/asterisk-1.4.2.tar.gz</a>