CVE-2013-5641
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 4.1%
The SIP channel driver (channels/chan_sip.c) in Asterisk Open Source 1.8.17.x through 1.8.22.x, 1.8.23.x before 1.8.23.1, and 11.x before 11.5.1 and Certified Asterisk 1.8.15 before 1.8.15-cert3 and 11.2 before 11.2-cert2 allows remote attackers to cause a denial of service (NULL pointer dereference, segmentation fault, and daemon crash) via an ACK with SDP to a previously terminated channel. NOTE: some of these details are obtained from third party information.
Produtos afetados
n/a · n/aReferências
http://archives.neohapsis.com/archives/bugtraq/2013-08/0175.htmlhttp://downloads.asterisk.org/pub/security/AST-2013-004.htmlhttp://osvdb.org/96691http://seclists.org/bugtraq/2013/Aug/185http://secunia.com/advisories/54534http://secunia.com/advisories/54617https://issues.asterisk.org/jira/browse/ASTERISK-21064http://www.debian.org/security/2013/dsa-2749http://www.mandriva.com/security/advisories?name=MDVSA-2013:223http://www.securityfocus.com/bid/62021http://www.securitytracker.com/id/1028956