Secunia
Login
|
|
CVE Reference: CVE-2009-0871 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2009-0871 |
|
|
Description: The SIP channel driver in Asterisk Open Source 1.4.22, 1.4.23, and 1.4.23.1; 1.6.0 before 1.6.0.6; 1.6.1 before 1.6.1.0-rc2; and Asterisk Business Edition C.2.3, with the pedantic option enabled, allows remote authenticated users to cause a denial of service (crash) via a SIP INVITE request without any headers, which triggers a NULL pointer dereference in the (1) sip_uri_headers_cmp and (2) sip_uri_params_cmp functions. |
|
|
CVE Status: Candidate |
|
|
References: ST 1021834 SAID Secunia Advisory: SA34229 OSVDB 52568 CONFIRM http://downloads.digium.com/pub/security/AST-2009-002.html http://bugs.digium.com/view.php?id=14417 http://bugs.digium.com/view.php?id=13547 BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/501656/100/0/threaded BID 34070 |
|
| Return to the previous page. |
