reqresp_parser.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.4.3 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a SIP packet with a Contact header that lacks a < (less than) character.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2011-07-06 12:55
Updated : 2011-09-06 20:17
NVD link : CVE-2011-2665
Mitre link : CVE-2011-2665
JSON object : View
CWE
Products Affected
digium
- asterisk