Description
Stack-based buffer overflow in channels/chan_mgcp.c in MGCP in Asterisk 1.0 through 1.2.10 allows remote attackers to execute arbitrary code via a crafted audit endpoint (AUEP) response.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | asterisk | 1:1.2.11.dfsg-1 | — |
References
- ADV-2006-3372 vdb-entry
- GLSA-200610-15 vendor-advisory
- http://labs.musecurity.com/advisories/MU-200608-01.txt
- 22651 third-party-advisory
- 19683 vdb-entry
- 1016742 vdb-entry
- 20060825 Multiple Vulnerabilities in Asterisk 1.2.10 (Fixed in 1.2.11) mailing-list
- http://ftp.digium.com/pub/asterisk/ChangeLog-1.2.11
- asterisk-mgcp-bo(28542) vdb-entry
- http://www.sineapps.com/news.php?rssid=1448
- 21600 third-party-advisory