Test Kennung:	1.3.6.1.4.1.25623.1.0.140648
Kategorie:	Denial of Service
Titel:	Asterisk DoS Vulnerability
Zusammenfassung:	Asterisk is prone to a denial of service vulnerability.
Beschreibung:	Summary: Asterisk is prone to a denial of service vulnerability. Vulnerability Insight: A select set of SIP messages create a dialog in Asterisk. Those SIP messages must contain a contact header. For those messages, if the header was not present and using the PJSIP channel driver, it would cause Asterisk to crash. The severity of this vulnerability is somewhat mitigated if authentication is enabled. If authentication is enabled a user would have to first be authorized before reaching the crash point. Affected Software/OS: Asterisk Open Source versions 13.x, 14.x, 15.x and Certified Asterisk version 13.18. Solution: Update to version 13.18.5, 14.7.5, 15.1.5, 13.18-cert2 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2017-17850 https://security.gentoo.org/glsa/201811-11 http://www.securitytracker.com/id/1040056
Copyright	Copyright (C) 2018 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.