ID de Prueba:	1.3.6.1.4.1.25623.1.1.10.2013.0266
Categoría:	Mageia Linux Local Security Checks
Título:	Mageia: Security Advisory (MGASA-2013-0266)
Resumen:	The remote host is missing an update for the 'asterisk' package(s) announced via the MGASA-2013-0266 advisory.
Descripción:	Summary: The remote host is missing an update for the 'asterisk' package(s) announced via the MGASA-2013-0266 advisory. Vulnerability Insight: A remotely exploitable crash vulnerability exists in the SIP channel driver if an ACK with SDP is received after the channel has been terminated. The handling code incorrectly assumes that the channel will always be present (CVE-2013-5641). A remotely exploitable crash vulnerability exists in the SIP channel driver if an invalid SDP is sent in a SIP request that defines media descriptions before connection information. The handling code incorrectly attempts to reference the socket address information even though that information has not yet been set (CVE-2013-5642). Affected Software/OS: 'asterisk' package(s) on Mageia 3. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2013-5641 BugTraq ID: 62021 http://www.securityfocus.com/bid/62021 Bugtraq: 20130827 AST-2013-004: Remote Crash From Late Arriving SIP ACK With SDP (Google Search) http://archives.neohapsis.com/archives/bugtraq/2013-08/0175.html http://seclists.org/bugtraq/2013/Aug/185 Debian Security Information: DSA-2749 (Google Search) http://www.debian.org/security/2013/dsa-2749 http://www.mandriva.com/security/advisories?name=MDVSA-2013:223 http://osvdb.org/96691 http://www.securitytracker.com/id/1028956 http://secunia.com/advisories/54534 http://secunia.com/advisories/54617 Common Vulnerability Exposure (CVE) ID: CVE-2013-5642 BugTraq ID: 62022 http://www.securityfocus.com/bid/62022 Bugtraq: 20130827 AST-2013-005: Remote Crash when Invalid SDP is sent in SIP Request (Google Search) http://archives.neohapsis.com/archives/bugtraq/2013-08/0174.html http://osvdb.org/96690 http://www.securitytracker.com/id/1028957
Copyright	Copyright (C) 2022 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.