Asterisk 1.4 before 1.4.1 and 1.2 before 1.2.16 allows remote attackers to cause a denial of service (crash) by sending a Session Initiation Protocol (SIP) packet without a URI and SIP-version header, which results in a NULL pointer dereference.

Several remote vulnerabilities have been discovered in Asterisk, a free software PBX and telephony toolkit. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CVE-2007-1306     'Mu Security' discovered that a NULL pointer dereference     in the SIP implementation could lead to denial of     service.

  - CVE-2007-1561     Inria Lorraine discovered that a programming error in     the SIP implementation could lead to denial of service.

  - CVE-2007-2294     It was discovered that a NULL pointer dereference in the     manager interface could lead to denial of service.

  - CVE-2007-2297     It was discovered that a programming error in the SIP     implementation could lead to denial of service.

  - CVE-2007-2488     Tim Panton and Birgit Arkestein discovered that a     programming error in the IAX2 implementation could lead     to information disclosure.

  - CVE-2007-3762     Russell Bryant discovered that a buffer overflow in the     IAX implementation could lead to the execution of     arbitrary code.

  - CVE-2007-3763     Chris Clark and Zane Lackey discovered that several NULL     pointer dereferences in the IAX2 implementation could     lead to denial of service.

  - CVE-2007-3764     Will Drewry discovered that a programming error in the     Skinny implementation could lead to denial of service.

The remote host is affected by the vulnerability described in GLSA-200703-14 (Asterisk: SIP Denial of Service)

    The MU Security Research Team discovered that Asterisk contains a     NULL pointer dereferencing error in the SIP channel when handling     request messages.
  Impact :

    A remote attacker could cause an Asterisk server listening for SIP     messages to crash by sending a specially crafted SIP request message.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Type	Severity
25938	Debian DSA-1358-1 : asterisk - several vulnerabilities	Nessus	Debian Local Security Checks	Local	critical
24839	GLSA-200703-14 : Asterisk: SIP Denial of Service	Nessus	Gentoo Local Security Checks	Local	high

Detections

Analytics

CVE-2007-1306

high

Tenable Plugins

critical

high