Beveiligingsadvies

CVE-2008-2119

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2008-06-04 19:17:00

Laatst bijgewerkt 2024-08-07 08:49:58

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

Asterisk Open Source 1.0.x and 1.2.x before 1.2.29 and Business Edition A.x.x and B.x.x before B.2.5.3, when pedantic parsing (aka pedanticsipchecking) is enabled, allows remote attackers to cause a denial of service (daemon crash) via a SIP INVITE message that lacks a From header, related to invocations of the ast_uri_decode function, and improper handling of (1) an empty const string and (2) a NULL pointer.

← Alle CVE's bekijken Bekijk op cve.org ↗