QwikSec

Security Database

CVE

CWE

Training

CVE-2012-2416

Published: Apr 30, 2012

Modified: Aug 6, 2024

PUBLISHED

Description

chan_sip.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.11.1 and 10.x before 10.3.1 and Asterisk Business Edition C.3.x before C.3.7.4, when the trustrpid option is enabled, allows remote authenticated users to cause a denial of service (daemon crash) by sending a SIP UPDATE message that triggers a connected-line update attempt without an associated channel.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://issues.asterisk.org/jira/browse/ASTERISK-19770

x_refsource_MISC

vdb-entry

x_refsource_SECTRACK

vdb-entry

x_refsource_OSVDB

vdb-entry

x_refsource_BID

asterisk-sipupdate-dos(75101)

vdb-entry

x_refsource_XF

FEDORA-2012-6724

vendor-advisory

x_refsource_FEDORA

third-party-advisory

x_refsource_SECUNIA

http://downloads.asterisk.org/pub/security/AST-2012-006.html

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.