FreshPorts - VuXML

Adam Boileau of Security-Assessment.com reports:

The Asterisk Skinny channel driver for Cisco SCCP phones (chan_skinny.so) incorrectly validates a length value in the packet header. An integer wrap-around leads to heap overwrite, and arbitrary remote code execution as root.

< 1.2.13

The NISCC and the OUSPG developed a test suite for the H.323 protocol. This test suite has uncovered vulnerabilities in several H.323 implementations with impacts ranging from denial-of-service to arbitrary code execution.

In the FreeBSD Ports Collection, `pwlib' is directly affected. Other applications such as `asterisk' and `openh323' incorporate `pwlib' statically and so are also independently affected.

< 1.5.0_5

le 0.7.2

< 1.12.0_4

Asterisk project reports:

Possible resource leak on uncompleted re-invite transactions.

Remote crash vulnerability in voice mail application.

gt 10.* lt 10.5.2

gt 1.8.* lt 1.8.13.1

Asterisk project reports:

Asterisk Manager User Unauthorized Shell Access

ACL rules ignored when placing outbound calls by certain IAX2 users

gt 10.* lt 10.7.1

gt 1.8.* lt 1.8.15.1

The Asterisk project reports:

AST-2016-001 - BEAST vulnerability in HTTP server

AST-2016-002 - File descriptor exhaustion in chan_sip

AST-2016-003 - Remote crash vulnerability when receiving UDPTL FAX data

< 1.8.32.3_5

< 11.21.1

< 13.7.1

The Asterisk project reports:

When Asterisk registers to a SIP TLS device and and verifies the server, Asterisk will accept signed certificates that match a common name other than the one Asterisk is expecting if the signed certificate has a common name containing a null byte after the portion of the common name that Asterisk expected. For example, if Asterisk is trying to register to www.domain.com, Asterisk will accept certificates of the form www.domain.com\x00www.someotherdomain.com

< 1.8.32.3

< 11.17.1

< 13.3.2

The Asterisk project reports:

CVE-2014-8150 reported an HTTP request injection vulnerability in libcURL. Asterisk uses libcURL in its func_curl.so module (the CURL() dialplan function), as well as its res_config_curl.so (cURL realtime backend) modules.

Since Asterisk may be configured to allow for user-supplied URLs to be passed to libcURL, it is possible that an attacker could use Asterisk as an attack vector to inject unauthorized HTTP requests if the version of libcURL installed on the Asterisk server is affected by CVE-2014-8150.

< 1.8.32.2

< 11.15.1

< 13.1.1

The Asterisk project reports:

The POODLE vulnerability is described under CVE-2014-3566. This advisory describes the Asterisk's project susceptibility to this vulnerability.

< 1.8.31.1

< 11.13.1

Emmanouel Kellenis reports a denial of service vulnerability within asterisk. The vulnerability is caused by a buffer overflow in "format_jpeg.c". A large JPEG image could trigger this bug, potentially allowing a local attacker to execute arbitrary code.

< 1.2.7

The Asterisk project reports:

AST-2014-012 - Mixed IP address families in access control lists may permit unwanted traffic.

AST-2014-018 - AMI permission escalation through DB dialplan function.

< 1.8.32.1

< 11.14.1

Asterisk project reports:

A remote authenticated user can cause a crash with a malformed request due to an unitialized variable.

gt 1.8.* lt 1.8.7.1

gt 10.0.0.* lt 10.0.0.r1