CVE-2012-3812

Double free vulnerability in apps/app_voicemail.c in Asterisk Open Source
1.8.x before 1.8.13.1 and 10.x before 10.5.2, Certified Asterisk
1.8.11-certx before 1.8.11-cert4, and Asterisk Digiumphones
10.x.x-digiumphones before 10.5.2-digiumphones allows remote authenticated
users to cause a denial of service (daemon crash) by establishing multiple
voicemail sessions and accessing both the Urgent mailbox and the INBOX
mailbox.

Bugs

• <https://bugs.launchpad.net/ubuntu/+source/asterisk/+bug/1022360&gt;