Download
| Alert*
oval:org.secpod.oval:def:600587
Paul Belanger reported a vulnerability in Asterisk identified as AST-2011-008 through which an unauthenticated attacker may crash an Asterisk server remotely. A package containing a null char causes the SIP header parser to alter unrelated memory structures. Jared Mauch reported a vulnerability in ... oval:org.secpod.oval:def:600586 DSA 2276-1 for Asterisk in the oldstable distribution introduced a functionality bug which invokes an undefined symbol. |