Back to search
CVE-2015-1558
Published: Feb 9, 2015
Modified: Aug 6, 2024
PUBLISHED
Description
Asterisk Open Source 12.x before 12.8.1 and 13.x before 13.1.1, when using the PJSIP channel driver, does not properly reclaim RTP ports, which allows remote authenticated users to cause a denial of service (file descriptor consumption) via an SDP offer containing only incompatible codecs.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
http://downloads.asterisk.org/pub/security/AST-2015-001.html
x_refsource_CONFIRM
1031661
vdb-entry
x_refsource_SECTRACK
20150128 AST-2015-001: File descriptor leak when incompatible codecs are offered
mailing-list
x_refsource_FULLDISC
20150128 AST-2015-001: File descriptor leak when incompatible codecs are offered
mailing-list
x_refsource_BUGTRAQ
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now