Debian Asterisk vulnerabilities

CVE-2014-8414 [MEDIUM] CVE-2014-8414: asterisk - ConfBridge in Asterisk 11.x before 11.14.1 and Certified Asterisk 11.6 before 11... ConfBridge in Asterisk 11.x before 11.14.1 and Certified Asterisk 11.6 before 11.6-cert8 does not properly handle state changes, which allows remote attackers to cause a denial of service (channel hang and memory consumption) by causing transitions to be delayed, which triggers a state change from hung up to waiting for media. Scope: local bullseye: resolved (fixed

CVE-2014-8417 [MEDIUM] CVE-2014-8417: asterisk - ConfBridge in Asterisk 11.x before 11.14.1, 12.x before 12.7.1, and 13.x before ... ConfBridge in Asterisk 11.x before 11.14.1, 12.x before 12.7.1, and 13.x before 13.0.1 and Certified Asterisk 11.6 before 11.6-cert8 allows remote authenticated users to (1) gain privileges via vectors related to an external protocol to the CONFBRIDGE dialplan function or (2) execute arbitrary system commands via a crafted ConfbridgeStartRecord AMI action. Scope: l

CVE-2014-8412 [MEDIUM] CVE-2014-8412: asterisk - The (1) VoIP channel drivers, (2) DUNDi, and (3) Asterisk Manager Interface (AMI... The (1) VoIP channel drivers, (2) DUNDi, and (3) Asterisk Manager Interface (AMI) in Asterisk Open Source 1.8.x before 1.8.32.1, 11.x before 11.14.1, 12.x before 12.7.1, and 13.x before 13.0.1 and Certified Asterisk 1.8.28 before 1.8.28-cert3 and 11.6 before 11.6-cert8 allows remote attackers to bypass the ACL restrictions via a packet with a source IP that does no

CVE-2014-8416 [MEDIUM] CVE-2014-8416: asterisk - Use-after-free vulnerability in the PJSIP channel driver in Asterisk Open Source... Use-after-free vulnerability in the PJSIP channel driver in Asterisk Open Source 12.x before 12.7.1 and 13.x before 13.0.1, when using the res_pjsip_refer module, allows remote attackers to cause a denial of service (crash) via an in-dialog INVITE with Replaces message, which triggers the channel to be hung up. Scope: local bullseye: resolved (fixed in 1:13.1.0~dfs

CVE-2014-6610 [MEDIUM] CVE-2014-6610: asterisk - Asterisk Open Source 11.x before 11.12.1 and 12.x before 12.5.1 and Certified As... Asterisk Open Source 11.x before 11.12.1 and 12.x before 12.5.1 and Certified Asterisk 11.6 before 11.6-cert6, when using the res_fax_spandsp module, allows remote authenticated users to cause a denial of service (crash) via an out of call message, which is not properly handled in the ReceiveFax dialplan application. Scope: local bullseye: resolved (fixed in 1:11.1

CVE-2014-2289 [LOW] CVE-2014-2289: asterisk - res/res_pjsip_exten_state.c in the PJSIP channel driver in Asterisk Open Source ... res/res_pjsip_exten_state.c in the PJSIP channel driver in Asterisk Open Source 12.x before 12.1.0 allows remote authenticated users to cause a denial of service (crash) via a SUBSCRIBE request without any Accept headers, which triggers an invalid pointer dereference. Scope: local bullseye: resolved sid: resolved

CVE-2014-6609 [MEDIUM] CVE-2014-6609: asterisk - The res_pjsip_pubsub module in Asterisk Open Source 12.x before 12.5.1 allows re... The res_pjsip_pubsub module in Asterisk Open Source 12.x before 12.5.1 allows remote authenticated users to cause a denial of service (crash) via crafted headers in a SIP SUBSCRIBE request for an event package. Scope: local bullseye: resolved sid: resolved

CVE-2014-4045 [MEDIUM] CVE-2014-4045: asterisk - The Publish/Subscribe Framework in the PJSIP channel driver in Asterisk Open Sou... The Publish/Subscribe Framework in the PJSIP channel driver in Asterisk Open Source 12.x before 12.3.1, when sub_min_expiry is set to zero, allows remote attackers to cause a denial of service (assertion failure and crash) via an unsubscribe request when not subscribed to the device. Scope: local bullseye: resolved sid: resolved

CVE-2014-4046 [MEDIUM] CVE-2014-4046: asterisk - Asterisk Open Source 11.x before 11.10.1 and 12.x before 12.3.1 and Certified As... Asterisk Open Source 11.x before 11.10.1 and 12.x before 12.3.1 and Certified Asterisk 11.6 before 11.6-cert3 allows remote authenticated Manager users to execute arbitrary shell commands via a MixMonitor action. Scope: local bullseye: resolved (fixed in 1:11.10.2~dfsg-1) sid: resolved (fixed in 1:11.10.2~dfsg-1)

CVE-2014-4047 [MEDIUM] CVE-2014-4047: asterisk - Asterisk Open Source 1.8.x before 1.8.28.1, 11.x before 11.10.1, and 12.x before... Asterisk Open Source 1.8.x before 1.8.28.1, 11.x before 11.10.1, and 12.x before 12.3.1 and Certified Asterisk 1.8.15 before 1.8.15-cert6 and 11.6 before 11.6-cert3 allows remote attackers to cause a denial of service (connection consumption) via a large number of (1) inactive or (2) incomplete HTTP connections. Scope: local bullseye: resolved (fixed in 1:11.10.2~d

CVE-2014-4048 [MEDIUM] CVE-2014-4048: asterisk - The PJSIP Channel Driver in Asterisk Open Source before 12.3.1 allows remote att... The PJSIP Channel Driver in Asterisk Open Source before 12.3.1 allows remote attackers to cause a denial of service (deadlock) by terminating a subscription request before it is complete, which triggers a SIP transaction timeout. Scope: local bullseye: resolved sid: resolved

CVE-2014-2288 [MEDIUM] CVE-2014-2288: asterisk - The PJSIP channel driver in Asterisk Open Source 12.x before 12.1.1, when qualif... The PJSIP channel driver in Asterisk Open Source 12.x before 12.1.1, when qualify_frequency "is enabled on an AOR and the remote SIP server challenges for authentication of the resulting OPTIONS request," allows remote attackers to cause a denial of service (crash) via a PJSIP endpoint that does not have an associated outgoing request. Scope: local bullseye: resolv

CVE-2014-2287 [LOW] CVE-2014-2287: asterisk - channels/chan_sip.c in Asterisk Open Source 1.8.x before 1.8.26.1, 11.8.x before... channels/chan_sip.c in Asterisk Open Source 1.8.x before 1.8.26.1, 11.8.x before 11.8.1, and 12.1.x before 12.1.1, and Certified Asterisk 1.8.15 before 1.8.15-cert5 and 11.6 before 11.6-cert2, when chan_sip has a certain configuration, allows remote authenticated users to cause a denial of service (channel and file descriptor consumption) via an INVITE request with a

CVE-2013-5642 [MEDIUM] CVE-2013-5642: asterisk - The SIP channel driver (channels/chan_sip.c) in Asterisk Open Source 1.8.x befor... The SIP channel driver (channels/chan_sip.c) in Asterisk Open Source 1.8.x before 1.8.23.1, 10.x before 10.12.3, and 11.x before 11.5.1; Certified Asterisk 1.8.15 before 1.8.15-cert3 and 11.2 before 11.2-cert2; and Asterisk Digiumphones 10.x-digiumphones before 10.12.3-digiumphones allows remote attackers to cause a denial of service (NULL pointer dereference, segm

CVE-2013-2686 [MEDIUM] CVE-2013-2686: asterisk - main/http.c in the HTTP server in Asterisk Open Source 1.8.x before 1.8.20.2, 10... main/http.c in the HTTP server in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x before 10.12.2, and 11.x before 11.2.2; Certified Asterisk 1.8.15 before 1.8.15-cert2; and Asterisk Digiumphones 10.x-digiumphones before 10.12.2-digiumphones does not properly restrict Content-Length values, which allows remote attackers to conduct stack-consumption attacks and caus

CVE-2013-5641 [MEDIUM] CVE-2013-5641: asterisk - The SIP channel driver (channels/chan_sip.c) in Asterisk Open Source 1.8.17.x th... The SIP channel driver (channels/chan_sip.c) in Asterisk Open Source 1.8.17.x through 1.8.22.x, 1.8.23.x before 1.8.23.1, and 11.x before 11.5.1 and Certified Asterisk 1.8.15 before 1.8.15-cert3 and 11.2 before 11.2-cert2 allows remote attackers to cause a denial of service (NULL pointer dereference, segmentation fault, and daemon crash) via an ACK with SDP to a pr

CVE-2013-7100 [MEDIUM] CVE-2013-7100: asterisk - Buffer overflow in the unpacksms16 function in apps/app_sms.c in Asterisk Open S... Buffer overflow in the unpacksms16 function in apps/app_sms.c in Asterisk Open Source 1.8.x before 1.8.24.1, 10.x before 10.12.4, and 11.x before 11.6.1; Asterisk with Digiumphones 10.x-digiumphones before 10.12.4-digiumphones; and Certified Asterisk 1.8.x before 1.8.15-cert4 and 11.x before 11.2-cert3 allows remote attackers to cause a denial of service (daemon cr

CVE-2013-2685 [HIGH] CVE-2013-2685: asterisk - Stack-based buffer overflow in res/res_format_attr_h264.c in Asterisk Open Sourc... Stack-based buffer overflow in res/res_format_attr_h264.c in Asterisk Open Source 11.x before 11.2.2 allows remote attackers to execute arbitrary code via a long sprop-parameter-sets H.264 media attribute in a SIP Session Description Protocol (SDP) header. Scope: local bullseye: resolved sid: resolved

CVE-2013-2264 [MEDIUM] CVE-2013-2264: asterisk - The SIP channel driver in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x befor... The SIP channel driver in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x before 10.12.2, and 11.x before 11.2.2; Certified Asterisk 1.8.15 before 1.8.15-cert2; Asterisk Business Edition (BE) C.3.x before C.3.8.1; and Asterisk Digiumphones 10.x-digiumphones before 10.12.2-digiumphones exhibits different behavior for invalid INVITE, SUBSCRIBE, and REGISTER transact

CVE-2012-2186 [CRITICAL] CVE-2012-2186: asterisk - Incomplete blacklist vulnerability in main/manager.c in Asterisk Open Source 1.8... Incomplete blacklist vulnerability in main/manager.c in Asterisk Open Source 1.8.x before 1.8.15.1 and 10.x before 10.7.1, Certified Asterisk 1.8.11 before 1.8.11-cert6, Asterisk Digiumphones 10.x.x-digiumphones before 10.7.1-digiumphones, and Asterisk Business Edition C.3.x before C.3.7.6 allows remote authenticated users to execute arbitrary commands by leverag