 |
Home ▼ Bookkeeping
Online ▼ Security
Audits ▼
Managed
DNS ▼
About
Order
FAQ
Acceptable Use Policy
Dynamic DNS Clients
Configure Domains Dyanmic DNS Update Password Network
Monitor ▼
Enterprise Package
Advanced Package
Standard Package
Free Trial
FAQ
Price/Feature Summary
Order/Renew
Examples
Configure/Status Alert Profiles | ||
| CVE ID: | CVE-2012-2416 |
| Description: | chan_sip.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.11.1 and 10.x before 10.3.1 and Asterisk Business Edition C.3.x before C.3.7.4, when the trustrpid option is enabled, allows remote authenticated users to cause a denial of service (daemon crash) by sending a SIP UPDATE message that triggers a connected-line update attempt without an associated channel. |
| Test IDs: | 1.3.6.1.4.1.25623.1.0.110018 |
| Cross References: |
Common Vulnerability Exposure (CVE) ID: CVE-2012-2416 BugTraq ID: 53205 http://www.securityfocus.com/bid/53205 http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079759.html https://issues.asterisk.org/jira/browse/ASTERISK-19770 http://osvdb.org/81456 http://www.securitytracker.com/id?1026963 http://secunia.com/advisories/48891 XForce ISS Database: asterisk-sipupdate-dos(75101) https://exchange.xforce.ibmcloud.com/vulnerabilities/75101 |