Vulnerabilities affecting this package (0)
| Vulnerability |
Summary |
Fixed by |
|
This package is not known to be affected by vulnerabilities.
|
Vulnerabilities fixed by this package (8)
| Vulnerability |
Summary |
Aliases |
|
VCID-7tjs-ybpe-r7hg
|
Multiple vulnerabilities have been found in Asterisk, the worst of
which could lead to Denial of Service, bypass intended ACL restrictions or
allow an authenticated user to gain escalated privileges.
|
CVE-2014-8417
|
|
VCID-8shw-ev6h-dqgh
|
Multiple vulnerabilities have been found in Asterisk, the worst of
which could lead to Denial of Service, bypass intended ACL restrictions or
allow an authenticated user to gain escalated privileges.
|
CVE-2014-8414
|
|
VCID-ay1n-kp3k-37db
|
Race condition in the chan_pjsip channel driver in Asterisk Open Source 12.x before 12.7.1 and 13.x before 13.0.1 allows remote attackers to cause a denial of service (assertion failure and crash) via a cancel request for a SIP session with a queued action to (1) answer a session or (2) send ringing.
|
CVE-2014-8415
|
|
VCID-bbhx-pe8h-fubn
|
Multiple vulnerabilities have been found in Asterisk, the worst of
which could lead to Denial of Service, bypass intended ACL restrictions or
allow an authenticated user to gain escalated privileges.
|
CVE-2014-8418
|
|
VCID-edp8-yh2h-xuck
|
Multiple vulnerabilities have been found in Asterisk, the worst of
which could lead to Denial of Service, bypass intended ACL restrictions or
allow an authenticated user to gain escalated privileges.
|
CVE-2014-9374
|
|
VCID-f1y5-37zk-x3ey
|
The res_pjsip_acl module in Asterisk Open Source 12.x before 12.7.1 and 13.x before 13.0.1 does not properly create and load ACLs defined in pjsip.conf at startup, which allows remote attackers to bypass intended PJSIP ACL rules.
|
CVE-2014-8413
|
|
VCID-mcfv-fuk8-cqaq
|
Multiple vulnerabilities have been found in Asterisk, the worst of
which could lead to Denial of Service, bypass intended ACL restrictions or
allow an authenticated user to gain escalated privileges.
|
CVE-2014-8412
|
|
VCID-sqgd-ykvk-2qay
|
Use-after-free vulnerability in the PJSIP channel driver in Asterisk Open Source 12.x before 12.7.1 and 13.x before 13.0.1, when using the res_pjsip_refer module, allows remote attackers to cause a denial of service (crash) via an in-dialog INVITE with Replaces message, which triggers the channel to be hung up.
|
CVE-2014-8416
|