Test ID:	1.3.6.1.4.1.25623.1.0.807712
Category:	Denial of Service
Title:	Asterisk Multiple Denial of Service Vulnerabilities
Summary:	Asterisk is prone to multiple denial of service (DoS); vulnerabilities.
Description:	Summary: Asterisk is prone to multiple denial of service (DoS) vulnerabilities. Vulnerability Insight: Multiple flaws exist due to - An error in 'chan_sip' function when the 'timert1 sip.conf' configuration is set to a value greater than 1245] - An input validation error in UDPTL FAX packet. Vulnerability Impact: Successful exploitation will allow remote attackers to cause a denial of service condition. Affected Software/OS: Asterisk version 1.8.x and 11.x before 11.21.1, 12.x and 13.x before 13.7.1. Solution: Update to version 11.21.1 or 13.7.1 or later. CVSS Score: 7.1 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-2232 Debian Security Information: DSA-3700 (Google Search) http://www.debian.org/security/2016/dsa-3700 http://www.securitytracker.com/id/1034931 Common Vulnerability Exposure (CVE) ID: CVE-2016-2316 BugTraq ID: 82651 http://www.securityfocus.com/bid/82651 http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177422.html http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177409.html http://www.securitytracker.com/id/1034930
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.