asterisk: two vulnerabilities
| Package(s): | asterisk | CVE #(s): | CVE-2016-2232 CVE-2016-7551 | ||||||||
| Created: | October 26, 2016 | Updated: | October 26, 2016 | ||||||||
| Description: | From the CVE entry:
Asterisk Open Source 1.8.x, 11.x before 11.21.1, 12.x, and 13.x before 13.7.1 and Certified Asterisk 1.8.28, 11.6 before 11.6-cert12, and 13.1 before 13.1-cert3 allow remote authenticated users to cause a denial of service (uninitialized pointer dereference and crash) via a zero length error correcting redundancy packet for a UDPTL FAX packet that is lost. (CVE-2016-2232) From the Debian advisory: Multiple vulnerabilities have been discovered in Asterisk, an open source PBX and telephony toolkit, which may result in denial of service or incorrect certificate validation. | ||||||||||
| Alerts: |
| ||||||||||