The IAX2 channel driver (chan_iax2) in Asterisk before 20070504 does not properly null terminate data, which allows remote attackers to trigger loss of transmitted data, and possibly obtain sensitive information (memory contents) or cause a denial of service (application crash), by sending a frame that lacks a 0 byte.

This update fixes multiple bugs that allowed attackers to remotely crash asterisk or cause an information leak (CVE-2007-1561, CVE-2007-1594, CVE-2007-1595, CVE-2007-2297, CVE-2007-2488).

Several remote vulnerabilities have been discovered in Asterisk, a free software PBX and telephony toolkit. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CVE-2007-1306     'Mu Security' discovered that a NULL pointer dereference     in the SIP implementation could lead to denial of     service.

  - CVE-2007-1561     Inria Lorraine discovered that a programming error in     the SIP implementation could lead to denial of service.

  - CVE-2007-2294     It was discovered that a NULL pointer dereference in the     manager interface could lead to denial of service.

  - CVE-2007-2297     It was discovered that a programming error in the SIP     implementation could lead to denial of service.

  - CVE-2007-2488     Tim Panton and Birgit Arkestein discovered that a     programming error in the IAX2 implementation could lead     to information disclosure.

  - CVE-2007-3762     Russell Bryant discovered that a buffer overflow in the     IAX implementation could lead to the execution of     arbitrary code.

  - CVE-2007-3763     Chris Clark and Zane Lackey discovered that several NULL     pointer dereferences in the IAX2 implementation could     lead to denial of service.

  - CVE-2007-3764     Will Drewry discovered that a programming error in the     Skinny implementation could lead to denial of service.

ID	Name	Product	Family	Type	Severity
27157	openSUSE 10 Security Update : asterisk (asterisk-3543)	Nessus	SuSE Local Security Checks	Local	critical
25938	Debian DSA-1358-1 : asterisk - several vulnerabilities	Nessus	Debian Local Security Checks	Local	critical

Detections

Analytics

CVE-2007-2488

high

Tenable Plugins

critical

critical