Search results

Query:

Filters:

Content type Categories

LWN Feature article
Guest article
News item
Email item
Security alert
Security vulnerability
Kernel patch
Comment Announcements
Briefs
Commerce
Development
Distributions
Front
Kernel
Legal
Letters
Press
Security

Select all

Select all

Order by: relevance date

Search results

asterisk: multiple vulnerabilities
([Security] Posted Dec 29, 2014 18:39 UTC (Mon) by ris )

CVE entries:
 
The (1) VoIP channel drivers, (2) DUNDi, and (3) Asterisk Manager Interface (AMI) in Asterisk Open Source 1.8.x before 1.8.32.1, 11.x before 11.14.1, 12.x before 12.7.1, and 13.x before 13.0.1 and Certified Asterisk 1.8.28 before 1.8.28-cert3 and 11.6 before 11.6-cert8 allows remote attackers to bypass the ACL restrictions via a packet with a source IP that does not share the address family as the first ACL entry. (CVE-2014-8412)
 
ConfBridge in Asterisk 11.x before 11.14.1 and Certified Asterisk 11.6 before 11.6-cert8 does not properly handle state changes, which allows remote attackers to cause a denial of service (channel hang and memory consumption) by causing transitions to be delayed, which triggers a state change from hung up to waiting for media. (CVE-2014-8414

Gentoo security update to asterisk
([Security] Posted Dec 29, 2014 17:46 UTC (Mon) by ris )

CVE-2014-8412
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-8412 
[ 2 ] CVE-2014-8414
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-8414 
[ 3 ] CVE-2014-8417
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-8417 
[ 4 ] CVE-2014-8418
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-8418 
[ 5 ] CVE-2014-9374
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-9374 

Availability
============

This GLSA and any updates to it are available for viewing at
the Gentoo Security