Description
The Skinny channel driver (chan_skinny) in Asterisk Open Source before 1.4.10, AsteriskNOW before beta7, Appliance Developer Kit before 0.7.0, and Appliance s800i before 1.0.3 allows remote authenticated users to cause a denial of service (application crash) via a CAPABILITIES_RES_MESSAGE packet with a capabilities count larger than the capabilities_res_message array population.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | asterisk | 1:1.4.10~dfsg-1 | — |
References
- ADV-2007-2808 vdb-entry
- 26340 third-party-advisory
- http://downloads.digium.com/pub/asa/ASA-2007-019.pdf
- asterisk-skinny-channel-dos(35870) vdb-entry
- 25228 vdb-entry
- 1018536 vdb-entry