Computer Security

Asterisk multiple security vulnerabilities

back  news / advisories / software / search / exploits  forward
[EN] securityvulns.ru no-pyccku


Asterisk multiple security vulnerabilities
Published:24.11.2014
Source:
SecurityVulns ID:14097
Type:remote
Threat Level:
6/10
Description:Restrictions bypass, privilege escalation, DoS.
Affected:ASTERISK : Asterisk 13.0
 ASTERISK : Asterisk 12.7
 ASTERISK : Asterisk 11.14
Original documentdocumentASTERISK, AST-2014-018: AMI permission escalation through DB dialplan function (24.11.2014)
 documentASTERISK, AST-2014-017: Permission escalation through ConfBridge actions/dialplan functions (24.11.2014)
 documentASTERISK, AST-2014-016: Remote Crash Vulnerability in PJSIP channel driver (24.11.2014)
 documentASTERISK, AST-2014-015: Remote Crash Vulnerability in PJSIP channel driver (24.11.2014)
 documentASTERISK, AST-2014-014: High call load may result in hung channels in ConfBridge. (24.11.2014)
 documentASTERISK, AST-2014-013: PJSIP ACLs are not loaded on startup (24.11.2014)
 documentASTERISK, AST-2014-012: Mixed IP address families in access control lists may permit unwanted traffic. (24.11.2014)
About | Terms of use | Privacy Policy
© SecurityVulns, 3APA3A, Vladimir Dubrovin
Nizhny Novgorod