CVE-2014-2289

Related Files

Gentoo Linux Security Advisory 201405-05

Posted May 5, 2014

Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory 201405-5 - Multiple buffer overflows in Asterisk might allow remote attackers to cause a Denial of Service condition. Versions less than 11.8.1 are affected.

tags | advisory, remote, denial of service, overflow

systems | linux, gentoo

advisories | CVE-2014-2286, CVE-2014-2287, CVE-2014-2288, CVE-2014-2289

SHA-256 | e20cf599e40bf35f9126ba11837927f5dd4e6a0416456a5084e6042d42786582

Download | Favorite | View

Asterisk Project Security Advisory - AST-2014-004

Posted Mar 11, 2014

Authored by Mark Michelson, Matt Jordan | Site asterisk.org

Asterisk Project Security Advisory - A remotely exploitable crash vulnerability exists in the PJSIP channel driver's handling of SUBSCRIBE requests. If a SUBSCRIBE request is received for the presence Event, and that request has no Accept headers, Asterisk will attempt to access an invalid pointer to the header location. Note that this issue was fixed during a re-architecture of the res_pjsip_pubsub module in Asterisk 12.1.0. As such, this issue has already been resolved in a released version of Asterisk. This notification is being released for users of Asterisk 12.0.0.

tags | advisory

advisories | CVE-2014-2289

SHA-256 | 6e56eb72b35ebd81d6277efa644e9243116635a3b307f8a61ee9f768038f90ec

Download | Favorite | View