Test Kennung:	1.3.6.1.4.1.25623.1.0.140493
Kategorie:	Denial of Service
Titel:	Asterisk pjproject Header DoS Vulnerability
Zusammenfassung:	Asterisk is prone to a buffer overflow vulnerability which leads; to a denial of service.
Beschreibung:	Summary: Asterisk is prone to a buffer overflow vulnerability which leads to a denial of service. Vulnerability Insight: By carefully crafting invalid values in the Cseq and the Via header port, pjproject's packet parsing code can create strings larger than the buffer allocated to hold them. This will usually cause Asterisk to crash immediately. The packets do not have to be authenticated. Vulnerability Impact: An unauthenticated remote attacker may crash Asterisk leading to a denial of service condition. Affected Software/OS: Asterisk Open Source 13.x, 14.x, 15.x and Certified Asterisk 13.13. Solution: Update to version 13.18.1, 14.7.1, 15.1.1, 13.13-cert7 or later. CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Copyright	Copyright (C) 2017 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.