asterisk asterisk business edition b.2.3.3 vulnerabilities and exploits

(subscribe to this query)

Asterisk Open Source 1.0.x and 1.2.x prior to 1.2.29 and Business Edition A.x.x and B.x.x before B.2.5.3, when pedantic parsing (aka pedanticsipchecking) is enabled, allows remote malicious users to cause a denial of service (daemon crash) via a SIP INVITE message that lacks a Fr...

1 EDB exploit

Asterisk Open Source 1.2.x prior to 1.2.26 and 1.4.x prior to 1.4.16, and Business Edition B.x.x before B.2.3.6 and C.x.x before C.1.0-beta8, when using database-based registrations ("realtime") and host-based authentication, does not check the IP address when the usern...

IAX2 in Asterisk Open Source 1.2.x prior to 1.2.31, 1.4.x prior to 1.4.23-rc4, and 1.6.x prior to 1.6.0.3-rc2; Business Edition A.x.x, B.x.x before B.2.5.7, C.1.x.x before C.1.10.4, and C.2.x.x before C.2.1.2.1; and s800i 1.2.x prior to 1.3.0 responds differently to a failed logi...

The IAX2 channel driver (chan_iax2) in Asterisk Open Source 1.0.x, 1.2.x prior to 1.2.28, and 1.4.x prior to 1.4.19.1; Business Edition A.x.x, B.x.x before B.2.5.2, and C.x.x before C.1.8.1; AsteriskNOW prior to 1.0.3; Appliance Developer Kit 0.x.x; and s800i prior to 1.1.0.3, wh...

The IAX2 channel driver (chan_iax2) in Asterisk 1.2 before revision 72630 and 1.4 before revision 65679, when configured to allow unauthenticated calls, sends "early audio" to an unverified source IP address of a NEW message, which allows remote malicious users to cause...

The FWDOWNL firmware-download implementation in Asterisk Open Source 1.0.x, 1.2.x prior to 1.2.30, and 1.4.x prior to 1.4.21.2; Business Edition A.x.x, B.x.x before B.2.5.4, and C.x.x before C.1.10.3; AsteriskNOW; Appliance Developer Kit 0.x.x; and s800i 1.0.x prior to 1.2.0.1 al...

Unspecified vulnerability in Asterisk Open Source 1.2.x prior to 1.2.27, 1.4.x prior to 1.4.18.1 and 1.4.19-rc3; Business Edition A.x.x, B.x.x before B.2.5.1, and C.x.x before C.1.6.2; AsteriskNOW 1.0.x prior to 1.0.2; Appliance Developer Kit prior to 1.4 revision 109393; and s80...

The IAX2 protocol implementation in Asterisk Open Source 1.2.x prior to 1.2.35, 1.4.x prior to 1.4.26.2, 1.6.0.x prior to 1.6.0.15, and 1.6.1.x prior to 1.6.1.6; Business Edition B.x.x before B.2.5.10, C.2.x before C.2.4.3, and C.3.x before C.3.1.1; and s800i 1.3.x prior to 1.3.0...

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook