FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2011-4063

This CVE name corresponds to:

Entered	Topic
2011-10-17	asterisk -- remote crash vulnerability in SIP channel driver

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2011-4063 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2011-4063
Phase	Assigned(20111015)

Description

chan_sip.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.7.1 and 10.x before 10.0.0-rc1 does not properly initialize variables during request parsing, which allows remote authenticated users to cause a denial of service (daemon crash) via a malformed request.

References

Source	Reference
BUGTRAQ	20111017 AST-2011-012: Remote crash vulnerability in SIP channel driver
CONFIRM	http://downloads.digium.com/pub/security/AST-2011-012.html
BID	50177
SECTRACK	1026191
SECUNIA	46420
SREASON	8478
XF	asterisk-sip-channel-driver-dos(70706)