Description: A vulnerability has been reported in Asterisk, which can be exploited by malicious people to cause a DoS (Denial of Service).
The vulnerability is caused due to the SIP Dialog History of SIP channel driver (chan_sip) recording all history items (88 bytes per item) in memory. This can be exploited to cause a DoS due to memory exhaustion by causing a high amount of logged items.
The vulnerability is reported in Asterisk 1.4.x prior to version 1.4.11. Asterisk Appliance Developer Kit 0.x.x prior to version 0.8.0 and s800i (Asterisk Appliance) 1.0.x prior to version 1.0.3 are also affected.
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.
Ideas, suggestions, and other feedback are most welcome.
