DoS Vulnerability in Asterisk
The makers of Asterisk, the Open Source phone system, have removed a bug that allowed denial of service attacks under certain circumstances.
The vulnerability affected the SIP channel driver, more specifically the "BYE with Also" transfer method. A faulty null-pointer dereference could be exploited to crash the application using a carefully crafted BYE message. The attack needed an existing connection.
All 1.4.x versions of Asterisk Open Source, all C.x.x versions of the Business Edition, the pre-release versions of AsteriskNOW, the Asterisk Appliance Developer Kit prior to version 1.4 revision 95946 and the Asterisk Appliance s800i up to version 1.0.3.4 are all affected by the bug.
Updates are available from the website for the Open Source applications. Updates for commercial versions will be provided via standard support channels.
Issue 158/2014
Buy this issue as a PDF
Digital Issue: Price $9.99
(incl. VAT)
Tag Cloud
News
-
New Mint Minted
Version 16 of the popular Linux desktop reveals new tools, edge-snapping, and performance improvements.
-
New Worm Attacks Linux Devices
Symantec says Linux-Darlioz burrows in through PHP.
-
Project Sputnik Gets a Boost
Dell renews its quest for the ultimate developer machine.
-
Sneaky New Linux Attack Discovered in the Wild
Innovative back door looks like normal SSH traffic.
-
CeBIT Call for Papers
One of CeBITs most successful forums opens the new year with a new name. The popular Open Source Forum continues in 2014 under the name Special Conference: Open Source. This year, the forum will be bigger and offer a wider range of possibilities for sponsors.
-
Linus Announces Linux Kernel 3.12
New release offers better graphics drivers and expands filesystem support.
-
Dark Alliance Reinvents Email Security
New mail protocol will shut out the NSA and prevent snooping on metadata.
-
DDos Attack Map Charts Denial of Service
A new web application helps users visualize distributed denial-of-service attacks.
-
Saucy Salamander Gets Legs
Ubuntu 13.10 takes a step toward convergence, with lots of mobility, but Mir only partly here.
-
Intel and Arduino Create Pi-Like System
Galileo board is targeted to embedded developers and educational institutions.