Description
reqresp_parser.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.4.2 does not initialize certain strings, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a malformed Contact header.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | asterisk | 1:1.8.4.2-1 | — |
References
- 20110602 AST-2011-007 mailing-list
- 44828 third-party-advisory
- FEDORA-2011-8983 vendor-advisory
- FEDORA-2011-8319 vendor-advisory
- 1025598 vdb-entry
- http://downloads.digium.com/pub/security/AST-2011-007.html
- 72752 vdb-entry
- 48096 vdb-entry
- asterisk-parseurifull-dos(67812) vdb-entry