Tag : null pointer

Skinny Channel Driver Remote Crash Vulnerability

Posted June 14, 2012 by Pavel Espinal & filed under VoIP News Comments: 0.

Tags: asterisk, denial of service, denial of service attack, Driver, linkedin, message, null pointer, product, sccp, Security, security labs, Skinny Channel Driver, Station

A remote attacker with a valid SCCP ID can use this vulnerability by closing a connection to the Asterisk server when a station is in the Off Hook call state and crash t..

Read more

Remote crash possibility with SIP and the “automon” feature enabled

Posted December 8, 2011 by Pavel Espinal & filed under VoIP News Comments: 0.

Tags: asterisk, asterisk download, Digium, linkedin, null pointer, project security, Remote, Security, security advisories, security advisory, sip, sip to sip

Asterisk Project Security Advisory – AST-2011-014Summary:      Remote crash possibility with SIP and the automonDescription:  When the automon feature is enabled in features.conf, it is possible to send a sequence of SIP requests that cause Aster..

Read more