Vendor Dictionary: Digium, Inc.

Digium, Inc.

Short Name:	[None Entered]
Previous Names:	[None Entered]
URL:	[None Entered]
Email:	[None Entered]
Security URL:	[None Entered]
Security Email:	[None Entered]
Knowledge Base:	[None Entered]
Notes:	[No Notes]

Vulnerabilities by Vendor Product

Digium, Inc.

Digium, Inc.

Asterisk Open Source: 1.4.38.0; OSVDB ID: 70518 Asterisk main/utils.c ast_uri_encode() Function Caller ID Information Overflow; OSVDB ID: 74352 Asterisk SIP Channel Driver Invalid SIP Request Username Enumeration; 1.4.39.0; OSVDB ID: 70518 Asterisk main/utils.c ast_uri_encode() Function Caller ID Information Overflow; OSVDB ID: 74352 Asterisk SIP Channel Driver Invalid SIP Request Username Enumeration; 1.6.1.20; OSVDB ID: 70518 Asterisk main/utils.c ast_uri_encode() Function Caller ID Information Overflow; 1.6.2.15.0; OSVDB ID: 70518 Asterisk main/utils.c ast_uri_encode() Function Caller ID Information Overflow; OSVDB ID: 74352 Asterisk SIP Channel Driver Invalid SIP Request Username Enumeration; OSVDB ID: 77598 Asterisk channels/chan_sip.c handle_request_info() Function SIP Packet Parsing Remote DoS; 1.6.2.16.0; OSVDB ID: 70518 Asterisk main/utils.c ast_uri_encode() Function Caller ID Information Overflow; OSVDB ID: 74352 Asterisk SIP Channel Driver Invalid SIP Request Username Enumeration; OSVDB ID: 77598 Asterisk channels/chan_sip.c handle_request_info() Function SIP Packet Parsing Remote DoS; 1.8.1.1; OSVDB ID: 70518 Asterisk main/utils.c ast_uri_encode() Function Caller ID Information Overflow; OSVDB ID: 74352 Asterisk SIP Channel Driver Invalid SIP Request Username Enumeration; OSVDB ID: 77598 Asterisk channels/chan_sip.c handle_request_info() Function SIP Packet Parsing Remote DoS; OSVDB ID: 76784 Asterisk SIP Channel Driver chan_sip.c Uninitialized Variable Request Parsing Remote DoS; 1.8.2.1; OSVDB ID: 70518 Asterisk main/utils.c ast_uri_encode() Function Caller ID Information Overflow; OSVDB ID: 74352 Asterisk SIP Channel Driver Invalid SIP Request Username Enumeration; OSVDB ID: 77598 Asterisk channels/chan_sip.c handle_request_info() Function SIP Packet Parsing Remote DoS; OSVDB ID: 76784 Asterisk SIP Channel Driver chan_sip.c Uninitialized Variable Request Parsing Remote DoS; 1.4.39.1; OSVDB ID: 70968 Asterisk main/udptl.c Multiple Function UPDTL Packet Handling Overflow; OSVDB ID: 74352 Asterisk SIP Channel Driver Invalid SIP Request Username Enumeration; 1.6.1.21; OSVDB ID: 70968 Asterisk main/udptl.c Multiple Function UPDTL Packet Handling Overflow; 1.6.2.16.1; OSVDB ID: 70968 Asterisk main/udptl.c Multiple Function UPDTL Packet Handling Overflow; OSVDB ID: 74352 Asterisk SIP Channel Driver Invalid SIP Request Username Enumeration; OSVDB ID: 77598 Asterisk channels/chan_sip.c handle_request_info() Function SIP Packet Parsing Remote DoS; 1.8.2.3; OSVDB ID: 70968 Asterisk main/udptl.c Multiple Function UPDTL Packet Handling Overflow; OSVDB ID: 74352 Asterisk SIP Channel Driver Invalid SIP Request Username Enumeration; OSVDB ID: 77598 Asterisk channels/chan_sip.c handle_request_info() Function SIP Packet Parsing Remote DoS; OSVDB ID: 76784 Asterisk SIP Channel Driver chan_sip.c Uninitialized Variable Request Parsing Remote DoS; 1.8.4.2; OSVDB ID: 72752 Asterisk SIP Channel Driver reqresp_parser.c parse_uri_full() Function Contact Header NULL Dereference Remote DoS; OSVDB ID: 74352 Asterisk SIP Channel Driver Invalid SIP Request Username Enumeration; OSVDB ID: 77598 Asterisk channels/chan_sip.c handle_request_info() Function SIP Packet Parsing Remote DoS; OSVDB ID: 76784 Asterisk SIP Channel Driver chan_sip.c Uninitialized Variable Request Parsing Remote DoS; 10.0.x; OSVDB ID: 83670 Asterisk Endpoint Provisional Response Parsing RTP Port Consumption Remote DoS; 10.1.x; OSVDB ID: 83670 Asterisk Endpoint Provisional Response Parsing RTP Port Consumption Remote DoS; 10.2.x; OSVDB ID: 83670 Asterisk Endpoint Provisional Response Parsing RTP Port Consumption Remote DoS; 10.3.x; OSVDB ID: 83670 Asterisk Endpoint Provisional Response Parsing RTP Port Consumption Remote DoS; 10.4.x; OSVDB ID: 83670 Asterisk Endpoint Provisional Response Parsing RTP Port Consumption Remote DoS; 10.5.0; OSVDB ID: 83670 Asterisk Endpoint Provisional Response Parsing RTP Port Consumption Remote DoS; 10.5.1; OSVDB ID: 83670 Asterisk Endpoint Provisional Response Parsing RTP Port Consumption Remote DoS; 1.8.1.x; OSVDB ID: 83670 Asterisk Endpoint Provisional Response Parsing RTP Port Consumption Remote DoS; OSVDB ID: 74352 Asterisk SIP Channel Driver Invalid SIP Request Username Enumeration; OSVDB ID: 77598 Asterisk channels/chan_sip.c handle_request_info() Function SIP Packet Parsing Remote DoS; OSVDB ID: 76784 Asterisk SIP Channel Driver chan_sip.c Uninitialized Variable Request Parsing Remote DoS; 1.8.2.x; OSVDB ID: 83670 Asterisk Endpoint Provisional Response Parsing RTP Port Consumption Remote DoS; OSVDB ID: 74352 Asterisk SIP Channel Driver Invalid SIP Request Username Enumeration; OSVDB ID: 77598 Asterisk channels/chan_sip.c handle_request_info() Function SIP Packet Parsing Remote DoS; OSVDB ID: 76784 Asterisk SIP Channel Driver chan_sip.c Uninitialized Variable Request Parsing Remote DoS; 1.8.3.x; OSVDB ID: 83670 Asterisk Endpoint Provisional Response Parsing RTP Port Consumption Remote DoS; OSVDB ID: 74352 Asterisk SIP Channel Driver Invalid SIP Request Username Enumeration; OSVDB ID: 77598 Asterisk channels/chan_sip.c handle_request_info() Function SIP Packet Parsing Remote DoS; OSVDB ID: 76784 Asterisk SIP Channel Driver chan_sip.c Uninitialized Variable Request Parsing Remote DoS; 1.8.4.x; OSVDB ID: 83670 Asterisk Endpoint Provisional Response Parsing RTP Port Consumption Remote DoS; OSVDB ID: 74352 Asterisk SIP Channel Driver Invalid SIP Request Username Enumeration; OSVDB ID: 77598 Asterisk channels/chan_sip.c handle_request_info() Function SIP Packet Parsing Remote DoS; OSVDB ID: 76784 Asterisk SIP Channel Driver chan_sip.c Uninitialized Variable Request Parsing Remote DoS; 1.8.5.x; OSVDB ID: 83670 Asterisk Endpoint Provisional Response Parsing RTP Port Consumption Remote DoS; OSVDB ID: 77598 Asterisk channels/chan_sip.c handle_request_info() Function SIP Packet Parsing Remote DoS; OSVDB ID: 76784 Asterisk SIP Channel Driver chan_sip.c Uninitialized Variable Request Parsing Remote DoS; 1.8.6.x; OSVDB ID: 83670 Asterisk Endpoint Provisional Response Parsing RTP Port Consumption Remote DoS; OSVDB ID: 77598 Asterisk channels/chan_sip.c handle_request_info() Function SIP Packet Parsing Remote DoS; OSVDB ID: 76784 Asterisk SIP Channel Driver chan_sip.c Uninitialized Variable Request Parsing Remote DoS; 1.8.7.x; OSVDB ID: 83670 Asterisk Endpoint Provisional Response Parsing RTP Port Consumption Remote DoS; 1.8.8.x; OSVDB ID: 83670 Asterisk Endpoint Provisional Response Parsing RTP Port Consumption Remote DoS; 1.8.9.x; OSVDB ID: 83670 Asterisk Endpoint Provisional Response Parsing RTP Port Consumption Remote DoS; 1.8.0.x; OSVDB ID: 83670 Asterisk Endpoint Provisional Response Parsing RTP Port Consumption Remote DoS; OSVDB ID: 74352 Asterisk SIP Channel Driver Invalid SIP Request Username Enumeration; 1.8.11.x; OSVDB ID: 83670 Asterisk Endpoint Provisional Response Parsing RTP Port Consumption Remote DoS; 1.8.13.0; OSVDB ID: 83670 Asterisk Endpoint Provisional Response Parsing RTP Port Consumption Remote DoS; 10.3.x; OSVDB ID: 83671 Asterisk Multiple Caller Simultaneous Voicemail Account Manipulation Double-free Remote DoS; 10.4.x; OSVDB ID: 83671 Asterisk Multiple Caller Simultaneous Voicemail Account Manipulation Double-free Remote DoS; 10.5.0; OSVDB ID: 83671 Asterisk Multiple Caller Simultaneous Voicemail Account Manipulation Double-free Remote DoS; 10.5.1; OSVDB ID: 83671 Asterisk Multiple Caller Simultaneous Voicemail Account Manipulation Double-free Remote DoS; 1.8.11.x; OSVDB ID: 83671 Asterisk Multiple Caller Simultaneous Voicemail Account Manipulation Double-free Remote DoS; 1.8.12.x; OSVDB ID: 83671 Asterisk Multiple Caller Simultaneous Voicemail Account Manipulation Double-free Remote DoS; 1.8.13.0; OSVDB ID: 83671 Asterisk Multiple Caller Simultaneous Voicemail Account Manipulation Double-free Remote DoS; 1.8.14.1; OSVDB ID: 88873 Asterisk Device State Cache Saturation Remote DoS; 10.6.1; OSVDB ID: 88873 Asterisk Device State Cache Saturation Remote DoS; 11.1.0; OSVDB ID: 88873 Asterisk Device State Cache Saturation Remote DoS; 1.8.18.0; OSVDB ID: 88874 Asterisk XMPP res_jabber.so / res_xmpp.so Module Packet Concatenation Stack Overflow Remote DoS; OSVDB ID: 88876 Asterisk HTTP Asterisk Management Interface 'ast_http_get_post_vars' Remote Stack Corruption; 10.10.0; OSVDB ID: 88874 Asterisk XMPP res_jabber.so / res_xmpp.so Module Packet Concatenation Stack Overflow Remote DoS; OSVDB ID: 88876 Asterisk HTTP Asterisk Management Interface 'ast_http_get_post_vars' Remote Stack Corruption; 11.0.1; OSVDB ID: 88874 Asterisk XMPP res_jabber.so / res_xmpp.so Module Packet Concatenation Stack Overflow Remote DoS; OSVDB ID: 88876 Asterisk HTTP Asterisk Management Interface 'ast_http_get_post_vars' Remote Stack Corruption; 1.8.18.0; OSVDB ID: 88875 Asterisk SIP TCP Packet Concatenation Stack Overflow Remote DoS; 10.10.0; OSVDB ID: 88875 Asterisk SIP TCP Packet Concatenation Stack Overflow Remote DoS; 11.0.1; OSVDB ID: 88875 Asterisk SIP TCP Packet Concatenation Stack Overflow Remote DoS; 1.8.18.0; 10.10.0; 11.0.1; 10.11.0; OSVDB ID: 88876 Asterisk HTTP Asterisk Management Interface 'ast_http_get_post_vars' Remote Stack Corruption; 1.8.19.0; OSVDB ID: 88876 Asterisk HTTP Asterisk Management Interface 'ast_http_get_post_vars' Remote Stack Corruption; 11.1.1; OSVDB ID: 88876 Asterisk HTTP Asterisk Management Interface 'ast_http_get_post_vars' Remote Stack Corruption; 1.4.x; OSVDB ID: 74352 Asterisk SIP Channel Driver Invalid SIP Request Username Enumeration; 1.6.2.x; OSVDB ID: 74352 Asterisk SIP Channel Driver Invalid SIP Request Username Enumeration; 1.8.x; OSVDB ID: 74352 Asterisk SIP Channel Driver Invalid SIP Request Username Enumeration; 1.4.41.2; OSVDB ID: 74352 Asterisk SIP Channel Driver Invalid SIP Request Username Enumeration; 1.6.2.18.2; OSVDB ID: 74352 Asterisk SIP Channel Driver Invalid SIP Request Username Enumeration; OSVDB ID: 77598 Asterisk channels/chan_sip.c handle_request_info() Function SIP Packet Parsing Remote DoS; 1.8.4.4; OSVDB ID: 74352 Asterisk SIP Channel Driver Invalid SIP Request Username Enumeration; OSVDB ID: 77598 Asterisk channels/chan_sip.c handle_request_info() Function SIP Packet Parsing Remote DoS; OSVDB ID: 76784 Asterisk SIP Channel Driver chan_sip.c Uninitialized Variable Request Parsing Remote DoS; 1.6.2.21; OSVDB ID: 77598 Asterisk channels/chan_sip.c handle_request_info() Function SIP Packet Parsing Remote DoS; 1.8.7.2; OSVDB ID: 77598 Asterisk channels/chan_sip.c handle_request_info() Function SIP Packet Parsing Remote DoS; 1.6.2.1; OSVDB ID: 77598 Asterisk channels/chan_sip.c handle_request_info() Function SIP Packet Parsing Remote DoS; 1.6.2.2; OSVDB ID: 77598 Asterisk channels/chan_sip.c handle_request_info() Function SIP Packet Parsing Remote DoS; 1.6.2.3; OSVDB ID: 77598 Asterisk channels/chan_sip.c handle_request_info() Function SIP Packet Parsing Remote DoS; 1.6.2.4; OSVDB ID: 77598 Asterisk channels/chan_sip.c handle_request_info() Function SIP Packet Parsing Remote DoS; 1.6.2.5; OSVDB ID: 77598 Asterisk channels/chan_sip.c handle_request_info() Function SIP Packet Parsing Remote DoS; 1.6.2.6; OSVDB ID: 77598 Asterisk channels/chan_sip.c handle_request_info() Function SIP Packet Parsing Remote DoS; 1.6.2.7; OSVDB ID: 77598 Asterisk channels/chan_sip.c handle_request_info() Function SIP Packet Parsing Remote DoS; 1.6.2.8; OSVDB ID: 77598 Asterisk channels/chan_sip.c handle_request_info() Function SIP Packet Parsing Remote DoS; 1.6.2.9; OSVDB ID: 77598 Asterisk channels/chan_sip.c handle_request_info() Function SIP Packet Parsing Remote DoS; 1.6.2.10; OSVDB ID: 77598 Asterisk channels/chan_sip.c handle_request_info() Function SIP Packet Parsing Remote DoS; 1.6.2.11; OSVDB ID: 77598 Asterisk channels/chan_sip.c handle_request_info() Function SIP Packet Parsing Remote DoS; 1.6.2.12; OSVDB ID: 77598 Asterisk channels/chan_sip.c handle_request_info() Function SIP Packet Parsing Remote DoS; 1.6.2.13; OSVDB ID: 77598 Asterisk channels/chan_sip.c handle_request_info() Function SIP Packet Parsing Remote DoS; 1.6.2.14; OSVDB ID: 77598 Asterisk channels/chan_sip.c handle_request_info() Function SIP Packet Parsing Remote DoS; 1.6.2.17; OSVDB ID: 77598 Asterisk channels/chan_sip.c handle_request_info() Function SIP Packet Parsing Remote DoS; 1.6.2.18; OSVDB ID: 77598 Asterisk channels/chan_sip.c handle_request_info() Function SIP Packet Parsing Remote DoS; 1.6.2.18.1; OSVDB ID: 77598 Asterisk channels/chan_sip.c handle_request_info() Function SIP Packet Parsing Remote DoS; 1.6.2.19; OSVDB ID: 77598 Asterisk channels/chan_sip.c handle_request_info() Function SIP Packet Parsing Remote DoS; 1.6.2.20; OSVDB ID: 77598 Asterisk channels/chan_sip.c handle_request_info() Function SIP Packet Parsing Remote DoS; 1.8.7.1; OSVDB ID: 77598 Asterisk channels/chan_sip.c handle_request_info() Function SIP Packet Parsing Remote DoS; OSVDB ID: 76784 Asterisk SIP Channel Driver chan_sip.c Uninitialized Variable Request Parsing Remote DoS; 1.8.7.0; OSVDB ID: 76784 Asterisk SIP Channel Driver chan_sip.c Uninitialized Variable Request Parsing Remote DoS; 1.8.20.1; OSVDB ID: 91752 Asterisk Multiple Message Handling Username Enumeration; 10.12.1; OSVDB ID: 91754 Asterisk main/http.c ast_http_get_post_vars() Function HTTP POST Request Content-Length Value Handling Resource Exhaustion Remote DoS; OSVDB ID: 91752 Asterisk Multiple Message Handling Username Enumeration; 11.2.1; OSVDB ID: 91754 Asterisk main/http.c ast_http_get_post_vars() Function HTTP POST Request Content-Length Value Handling Resource Exhaustion Remote DoS; OSVDB ID: 91752 Asterisk Multiple Message Handling Username Enumeration; 11.2.1; OSVDB ID: 91753 Asterisk res/res_format_attr_h264.c h264_format_attr_sdp_parse() Function h264 Video Format Attribute Resource Crafted SDP Header Handling Remote Stack Buffer Overflow; 1.8.19.1; OSVDB ID: 91754 Asterisk main/http.c ast_http_get_post_vars() Function HTTP POST Request Content-Length Value Handling Resource Exhaustion Remote DoS; 1.8.20.0; OSVDB ID: 91754 Asterisk main/http.c ast_http_get_post_vars() Function HTTP POST Request Content-Length Value Handling Resource Exhaustion Remote DoS; 1.8.20.1; OSVDB ID: 91754 Asterisk main/http.c ast_http_get_post_vars() Function HTTP POST Request Content-Length Value Handling Resource Exhaustion Remote DoS; 10.11.1; OSVDB ID: 91754 Asterisk main/http.c ast_http_get_post_vars() Function HTTP POST Request Content-Length Value Handling Resource Exhaustion Remote DoS; 10.12.0; OSVDB ID: 91754 Asterisk main/http.c ast_http_get_post_vars() Function HTTP POST Request Content-Length Value Handling Resource Exhaustion Remote DoS; 10.12.1; 11.1.2; OSVDB ID: 91754 Asterisk main/http.c ast_http_get_post_vars() Function HTTP POST Request Content-Length Value Handling Resource Exhaustion Remote DoS; 11.2.0; OSVDB ID: 91754 Asterisk main/http.c ast_http_get_post_vars() Function HTTP POST Request Content-Length Value Handling Resource Exhaustion Remote DoS; 11.2.1

Asterisk Business Edition: A.x.x; OSVDB ID: 35369 Asterisk Manager Interface Passwordless User MD5 Authentication DoS; B.1.3; OSVDB ID: 35369 Asterisk Manager Interface Passwordless User MD5 Authentication DoS; C.3.6.1; OSVDB ID: 70518 Asterisk main/utils.c ast_uri_encode() Function Caller ID Information Overflow; OSVDB ID: 74352 Asterisk SIP Channel Driver Invalid SIP Request Username Enumeration; C.3.6.2; OSVDB ID: 70968 Asterisk main/udptl.c Multiple Function UPDTL Packet Handling Overflow; OSVDB ID: 74352 Asterisk SIP Channel Driver Invalid SIP Request Username Enumeration; C.3.7.3; OSVDB ID: 81454 Asterisk Manager Interface Multiple Action Handling Remote Shell Command Execution; OSVDB ID: 81456 Asterisk SIP Channel Driver SIP UPDATE Request Parsing Remote DoS; OSVDB ID: 74352 Asterisk SIP Channel Driver Invalid SIP Request Username Enumeration; C.3.x; OSVDB ID: 74352 Asterisk SIP Channel Driver Invalid SIP Request Username Enumeration; C.3.8.0; OSVDB ID: 91752 Asterisk Multiple Message Handling Username Enumeration

Asterisk Digiumphones: 10.0.x-digiumphones; OSVDB ID: 83670 Asterisk Endpoint Provisional Response Parsing RTP Port Consumption Remote DoS; 10.1.x-digiumphones; OSVDB ID: 83670 Asterisk Endpoint Provisional Response Parsing RTP Port Consumption Remote DoS; 10.2.x-digiumphones; OSVDB ID: 83670 Asterisk Endpoint Provisional Response Parsing RTP Port Consumption Remote DoS; 10.3.x-digiumphones; OSVDB ID: 83670 Asterisk Endpoint Provisional Response Parsing RTP Port Consumption Remote DoS; 10.4.x-digiumphones; OSVDB ID: 83670 Asterisk Endpoint Provisional Response Parsing RTP Port Consumption Remote DoS; 10.5.0-digiumphones; OSVDB ID: 83670 Asterisk Endpoint Provisional Response Parsing RTP Port Consumption Remote DoS; 10.5.1-digiumphones; OSVDB ID: 83670 Asterisk Endpoint Provisional Response Parsing RTP Port Consumption Remote DoS; 10.5.1-digiumphones; OSVDB ID: 83671 Asterisk Multiple Caller Simultaneous Voicemail Account Manipulation Double-free Remote DoS; 10.5.0-digiumphones; OSVDB ID: 83671 Asterisk Multiple Caller Simultaneous Voicemail Account Manipulation Double-free Remote DoS; 10.4.x-digiumphones; OSVDB ID: 83671 Asterisk Multiple Caller Simultaneous Voicemail Account Manipulation Double-free Remote DoS; 10.3.x-digiumphones; OSVDB ID: 83671 Asterisk Multiple Caller Simultaneous Voicemail Account Manipulation Double-free Remote DoS; 10.2.x-digiumphones; OSVDB ID: 83671 Asterisk Multiple Caller Simultaneous Voicemail Account Manipulation Double-free Remote DoS; 10.1.x-digiumphones; OSVDB ID: 83671 Asterisk Multiple Caller Simultaneous Voicemail Account Manipulation Double-free Remote DoS; 10.0.x-digiumphones; OSVDB ID: 83671 Asterisk Multiple Caller Simultaneous Voicemail Account Manipulation Double-free Remote DoS; 10.6.1-digiumphones; OSVDB ID: 88873 Asterisk Device State Cache Saturation Remote DoS; 10.10.0-digiumphones; OSVDB ID: 88874 Asterisk XMPP res_jabber.so / res_xmpp.so Module Packet Concatenation Stack Overflow Remote DoS; OSVDB ID: 88876 Asterisk HTTP Asterisk Management Interface 'ast_http_get_post_vars' Remote Stack Corruption; 10.10.0-digiumphones; OSVDB ID: 88875 Asterisk SIP TCP Packet Concatenation Stack Overflow Remote DoS; 10.10.0-digiumphones; 10.11.0-digiumphones; OSVDB ID: 88876 Asterisk HTTP Asterisk Management Interface 'ast_http_get_post_vars' Remote Stack Corruption; 10.12.1-digiumphones; OSVDB ID: 91752 Asterisk Multiple Message Handling Username Enumeration; 10.11.1-digiumphones; OSVDB ID: 91754 Asterisk main/http.c ast_http_get_post_vars() Function HTTP POST Request Content-Length Value Handling Resource Exhaustion Remote DoS; 10.12.0-digiumphones; OSVDB ID: 91754 Asterisk main/http.c ast_http_get_post_vars() Function HTTP POST Request Content-Length Value Handling Resource Exhaustion Remote DoS; 10.12.1-digiumphones; OSVDB ID: 91754 Asterisk main/http.c ast_http_get_post_vars() Function HTTP POST Request Content-Length Value Handling Resource Exhaustion Remote DoS

Asterisk Appliance Developer Kit: 0.3.2a; OSVDB ID: 35368 Asterisk T.38 SDP Parser chan_sip.c process_sdp Function Overflow; OSVDB ID: 35369 Asterisk Manager Interface Passwordless User MD5 Authentication DoS; 0.2.0; OSVDB ID: 35368 Asterisk T.38 SDP Parser chan_sip.c process_sdp Function Overflow; OSVDB ID: 35369 Asterisk Manager Interface Passwordless User MD5 Authentication DoS

Certified Asterisk: 1.8.11 cert; OSVDB ID: 83670 Asterisk Endpoint Provisional Response Parsing RTP Port Consumption Remote DoS; 1.8.11 cert1; OSVDB ID: 83670 Asterisk Endpoint Provisional Response Parsing RTP Port Consumption Remote DoS; 1.8.11 cert2; OSVDB ID: 83670 Asterisk Endpoint Provisional Response Parsing RTP Port Consumption Remote DoS; 1.8.11 cert3; OSVDB ID: 83670 Asterisk Endpoint Provisional Response Parsing RTP Port Consumption Remote DoS; 1.8.11 cert; OSVDB ID: 83671 Asterisk Multiple Caller Simultaneous Voicemail Account Manipulation Double-free Remote DoS; 1.8.11 cert1; OSVDB ID: 83671 Asterisk Multiple Caller Simultaneous Voicemail Account Manipulation Double-free Remote DoS; 1.8.11 cert2; OSVDB ID: 83671 Asterisk Multiple Caller Simultaneous Voicemail Account Manipulation Double-free Remote DoS; 1.8.11 cert3; OSVDB ID: 83671 Asterisk Multiple Caller Simultaneous Voicemail Account Manipulation Double-free Remote DoS; 1.8.11; OSVDB ID: 88873 Asterisk Device State Cache Saturation Remote DoS; 1.8.11-cert9; OSVDB ID: 88876 Asterisk HTTP Asterisk Management Interface 'ast_http_get_post_vars' Remote Stack Corruption; 1.8.15-cert1; OSVDB ID: 91754 Asterisk main/http.c ast_http_get_post_vars() Function HTTP POST Request Content-Length Value Handling Resource Exhaustion Remote DoS; OSVDB ID: 91752 Asterisk Multiple Message Handling Username Enumeration; 1.8.15-cert1

Asterisk: 1.4.43; OSVDB ID: 80125 Asterisk apps/app_milliwatt.c milliwatt_generate() Function Internal Data Sample Packet Parsing Remote DoS; 1.6.2.22; OSVDB ID: 80125 Asterisk apps/app_milliwatt.c milliwatt_generate() Function Internal Data Sample Packet Parsing Remote DoS; 1.8.10.0; OSVDB ID: 80125 Asterisk apps/app_milliwatt.c milliwatt_generate() Function Internal Data Sample Packet Parsing Remote DoS; 1.8.11.0; OSVDB ID: 80125 Asterisk apps/app_milliwatt.c milliwatt_generate() Function Internal Data Sample Packet Parsing Remote DoS; 10.2.0; OSVDB ID: 80125 Asterisk apps/app_milliwatt.c milliwatt_generate() Function Internal Data Sample Packet Parsing Remote DoS; 10.3.0; OSVDB ID: 80125 Asterisk apps/app_milliwatt.c milliwatt_generate() Function Internal Data Sample Packet Parsing Remote DoS

AsteriskNOW: beta 5; OSVDB ID: 35368 Asterisk T.38 SDP Parser chan_sip.c process_sdp Function Overflow; beta5; OSVDB ID: 35369 Asterisk Manager Interface Passwordless User MD5 Authentication DoS

Asterisk: 1.0.0; OSVDB ID: 29972 Asterisk Skinny Channel Driver (chan_skinny) get_input Function Remote Overflow; 1.0.1; OSVDB ID: 29972 Asterisk Skinny Channel Driver (chan_skinny) get_input Function Remote Overflow; 1.0.2; OSVDB ID: 29972 Asterisk Skinny Channel Driver (chan_skinny) get_input Function Remote Overflow; 1.0.3; OSVDB ID: 29972 Asterisk Skinny Channel Driver (chan_skinny) get_input Function Remote Overflow; 1.0.4; OSVDB ID: 29972 Asterisk Skinny Channel Driver (chan_skinny) get_input Function Remote Overflow; 1.0.5; OSVDB ID: 29972 Asterisk Skinny Channel Driver (chan_skinny) get_input Function Remote Overflow; 1.0.6; OSVDB ID: 29972 Asterisk Skinny Channel Driver (chan_skinny) get_input Function Remote Overflow; 1.0.7; OSVDB ID: 29972 Asterisk Skinny Channel Driver (chan_skinny) get_input Function Remote Overflow; 1.0.8; OSVDB ID: 29972 Asterisk Skinny Channel Driver (chan_skinny) get_input Function Remote Overflow; 1.0.9; OSVDB ID: 29972 Asterisk Skinny Channel Driver (chan_skinny) get_input Function Remote Overflow; 1.0.10; OSVDB ID: 29972 Asterisk Skinny Channel Driver (chan_skinny) get_input Function Remote Overflow; 1.0.11; OSVDB ID: 29972 Asterisk Skinny Channel Driver (chan_skinny) get_input Function Remote Overflow; 1.2.0; OSVDB ID: 29972 Asterisk Skinny Channel Driver (chan_skinny) get_input Function Remote Overflow; OSVDB ID: 34479 Asterisk Malformed SIP INVITE Request DoS; OSVDB ID: 35369 Asterisk Manager Interface Passwordless User MD5 Authentication DoS; 1.2.1; OSVDB ID: 29972 Asterisk Skinny Channel Driver (chan_skinny) get_input Function Remote Overflow; OSVDB ID: 34479 Asterisk Malformed SIP INVITE Request DoS; OSVDB ID: 35369 Asterisk Manager Interface Passwordless User MD5 Authentication DoS; 1.2.2; OSVDB ID: 29972 Asterisk Skinny Channel Driver (chan_skinny) get_input Function Remote Overflow; OSVDB ID: 34479 Asterisk Malformed SIP INVITE Request DoS; OSVDB ID: 35369 Asterisk Manager Interface Passwordless User MD5 Authentication DoS; 1.2.3; OSVDB ID: 29972 Asterisk Skinny Channel Driver (chan_skinny) get_input Function Remote Overflow; OSVDB ID: 34479 Asterisk Malformed SIP INVITE Request DoS; OSVDB ID: 35369 Asterisk Manager Interface Passwordless User MD5 Authentication DoS; 1.2.4; OSVDB ID: 29972 Asterisk Skinny Channel Driver (chan_skinny) get_input Function Remote Overflow; OSVDB ID: 34479 Asterisk Malformed SIP INVITE Request DoS; OSVDB ID: 35369 Asterisk Manager Interface Passwordless User MD5 Authentication DoS; 1.2.5; OSVDB ID: 29972 Asterisk Skinny Channel Driver (chan_skinny) get_input Function Remote Overflow; OSVDB ID: 34479 Asterisk Malformed SIP INVITE Request DoS; OSVDB ID: 35369 Asterisk Manager Interface Passwordless User MD5 Authentication DoS; 1.2.6; OSVDB ID: 29972 Asterisk Skinny Channel Driver (chan_skinny) get_input Function Remote Overflow; OSVDB ID: 34479 Asterisk Malformed SIP INVITE Request DoS; OSVDB ID: 35369 Asterisk Manager Interface Passwordless User MD5 Authentication DoS; 1.2.7; OSVDB ID: 29972 Asterisk Skinny Channel Driver (chan_skinny) get_input Function Remote Overflow; OSVDB ID: 34479 Asterisk Malformed SIP INVITE Request DoS; OSVDB ID: 35369 Asterisk Manager Interface Passwordless User MD5 Authentication DoS; 1.2.8; OSVDB ID: 29972 Asterisk Skinny Channel Driver (chan_skinny) get_input Function Remote Overflow; OSVDB ID: 34479 Asterisk Malformed SIP INVITE Request DoS; OSVDB ID: 35369 Asterisk Manager Interface Passwordless User MD5 Authentication DoS; 1.2.9; OSVDB ID: 29972 Asterisk Skinny Channel Driver (chan_skinny) get_input Function Remote Overflow; OSVDB ID: 34479 Asterisk Malformed SIP INVITE Request DoS; OSVDB ID: 35369 Asterisk Manager Interface Passwordless User MD5 Authentication DoS; 1.2.10; OSVDB ID: 29972 Asterisk Skinny Channel Driver (chan_skinny) get_input Function Remote Overflow; OSVDB ID: 34479 Asterisk Malformed SIP INVITE Request DoS; OSVDB ID: 35369 Asterisk Manager Interface Passwordless User MD5 Authentication DoS; 1.2.11; OSVDB ID: 29972 Asterisk Skinny Channel Driver (chan_skinny) get_input Function Remote Overflow; OSVDB ID: 35369 Asterisk Manager Interface Passwordless User MD5 Authentication DoS; 1.2.12; OSVDB ID: 29972 Asterisk Skinny Channel Driver (chan_skinny) get_input Function Remote Overflow; OSVDB ID: 34479 Asterisk Malformed SIP INVITE Request DoS; OSVDB ID: 35369 Asterisk Manager Interface Passwordless User MD5 Authentication DoS; 1.4.0; OSVDB ID: 34479 Asterisk Malformed SIP INVITE Request DoS; OSVDB ID: 35368 Asterisk T.38 SDP Parser chan_sip.c process_sdp Function Overflow; OSVDB ID: 35369 Asterisk Manager Interface Passwordless User MD5 Authentication DoS; 1.4.1; OSVDB ID: 34479 Asterisk Malformed SIP INVITE Request DoS; OSVDB ID: 35368 Asterisk T.38 SDP Parser chan_sip.c process_sdp Function Overflow; OSVDB ID: 35369 Asterisk Manager Interface Passwordless User MD5 Authentication DoS; 1.2.16; OSVDB ID: 34479 Asterisk Malformed SIP INVITE Request DoS; OSVDB ID: 35369 Asterisk Manager Interface Passwordless User MD5 Authentication DoS; 1.2.15; OSVDB ID: 34479 Asterisk Malformed SIP INVITE Request DoS; OSVDB ID: 35369 Asterisk Manager Interface Passwordless User MD5 Authentication DoS; 1.2.14; OSVDB ID: 34479 Asterisk Malformed SIP INVITE Request DoS; OSVDB ID: 35369 Asterisk Manager Interface Passwordless User MD5 Authentication DoS; 1.2.13; OSVDB ID: 34479 Asterisk Malformed SIP INVITE Request DoS; OSVDB ID: 35369 Asterisk Manager Interface Passwordless User MD5 Authentication DoS; 1.4.2; OSVDB ID: 35368 Asterisk T.38 SDP Parser chan_sip.c process_sdp Function Overflow; OSVDB ID: 35369 Asterisk Manager Interface Passwordless User MD5 Authentication DoS; 1.0.x; OSVDB ID: 35369 Asterisk Manager Interface Passwordless User MD5 Authentication DoS; 1.4.0-beta1; OSVDB ID: 35369 Asterisk Manager Interface Passwordless User MD5 Authentication DoS; 1.4.0-beta2; OSVDB ID: 35369 Asterisk Manager Interface Passwordless User MD5 Authentication DoS; 1.4.0-beta3; OSVDB ID: 35369 Asterisk Manager Interface Passwordless User MD5 Authentication DoS; 1.4.0-beta4; OSVDB ID: 35369 Asterisk Manager Interface Passwordless User MD5 Authentication DoS; 1.2.17; OSVDB ID: 35369 Asterisk Manager Interface Passwordless User MD5 Authentication DoS; 1.2.12.1; OSVDB ID: 35369 Asterisk Manager Interface Passwordless User MD5 Authentication DoS; 1.2.9.1; OSVDB ID: 35369 Asterisk Manager Interface Passwordless User MD5 Authentication DoS; 1.2.7.1; OSVDB ID: 35369 Asterisk Manager Interface Passwordless User MD5 Authentication DoS; 1.2.0-beta1; OSVDB ID: 35369 Asterisk Manager Interface Passwordless User MD5 Authentication DoS; 1.2.0-beta2; OSVDB ID: 35369 Asterisk Manager Interface Passwordless User MD5 Authentication DoS; 1.2.0rc1; OSVDB ID: 35369 Asterisk Manager Interface Passwordless User MD5 Authentication DoS; 1.2.0rc2; OSVDB ID: 35369 Asterisk Manager Interface Passwordless User MD5 Authentication DoS; 1.2.x; OSVDB ID: 59697 Asterisk SIP REGISTER Response Username Enumeration Weakness; 1.2.35; OSVDB ID: 59697 Asterisk SIP REGISTER Response Username Enumeration Weakness; 1.4.x; OSVDB ID: 59697 Asterisk SIP REGISTER Response Username Enumeration Weakness; 1.4.26.3; OSVDB ID: 59697 Asterisk SIP REGISTER Response Username Enumeration Weakness; 1.6.0.x; OSVDB ID: 59697 Asterisk SIP REGISTER Response Username Enumeration Weakness; 1.6.0.17; OSVDB ID: 59697 Asterisk SIP REGISTER Response Username Enumeration Weakness; 1.6.1.x; OSVDB ID: 59697 Asterisk SIP REGISTER Response Username Enumeration Weakness; 1.6.1.9; OSVDB ID: 59697 Asterisk SIP REGISTER Response Username Enumeration Weakness; 1.8.10.0; OSVDB ID: 80126 Asterisk main/utils.c ast_parse_digest() Function HTTP Digest Authentication String Parsing Remote Overflow; 10.2.0; OSVDB ID: 80126 Asterisk main/utils.c ast_parse_digest() Function HTTP Digest Authentication String Parsing Remote Overflow; OSVDB ID: 83040 Asterisk channels/chan_skinny.c SCCP (Skinny) Channel Driver Client Connection Termination Off Hook State NULL-Pointer Dereference Remote DoS; 1.6.2.23; OSVDB ID: 81454 Asterisk Manager Interface Multiple Action Handling Remote Shell Command Execution; OSVDB ID: 81455 Asterisk Skinny Channel Drive KEYPAD_BUTTON_MESSAGE Event Parsing Remote Overflow; 1.8.11.0; OSVDB ID: 81454 Asterisk Manager Interface Multiple Action Handling Remote Shell Command Execution; OSVDB ID: 81456 Asterisk SIP Channel Driver SIP UPDATE Request Parsing Remote DoS; 10.3.0; OSVDB ID: 81454 Asterisk Manager Interface Multiple Action Handling Remote Shell Command Execution; OSVDB ID: 81455 Asterisk Skinny Channel Drive KEYPAD_BUTTON_MESSAGE Event Parsing Remote Overflow; 1.8.11.0; OSVDB ID: 81455 Asterisk Skinny Channel Drive KEYPAD_BUTTON_MESSAGE Event Parsing Remote Overflow; 10.3.0; OSVDB ID: 81456 Asterisk SIP Channel Driver SIP UPDATE Request Parsing Remote DoS; OSVDB ID: 83040 Asterisk channels/chan_skinny.c SCCP (Skinny) Channel Driver Client Connection Termination Off Hook State NULL-Pointer Dereference Remote DoS; 1.8.12.0; OSVDB ID: 82450 Asterisk channels/chan_sip.c handle_request_update() Function IAX2 Channel Driver Call Hold Feature Remote DoS; OSVDB ID: 82450 Asterisk channels/chan_sip.c handle_request_update() Function IAX2 Channel Driver Call Hold Feature Remote DoS; OSVDB ID: 82451 Asterisk channels/chan_skinny.c SCCP (Skinny) Channel Driver Client Connection Termination Handling Remote DoS; 10.4.0; OSVDB ID: 83040 Asterisk channels/chan_skinny.c SCCP (Skinny) Channel Driver Client Connection Termination Off Hook State NULL-Pointer Dereference Remote DoS; OSVDB ID: 82450 Asterisk channels/chan_sip.c handle_request_update() Function IAX2 Channel Driver Call Hold Feature Remote DoS; OSVDB ID: 82450 Asterisk channels/chan_sip.c handle_request_update() Function IAX2 Channel Driver Call Hold Feature Remote DoS; OSVDB ID: 82451 Asterisk channels/chan_skinny.c SCCP (Skinny) Channel Driver Client Connection Termination Handling Remote DoS; 1.8.11-cert1; OSVDB ID: 82450 Asterisk channels/chan_sip.c handle_request_update() Function IAX2 Channel Driver Call Hold Feature Remote DoS; OSVDB ID: 82450 Asterisk channels/chan_sip.c handle_request_update() Function IAX2 Channel Driver Call Hold Feature Remote DoS; OSVDB ID: 82451 Asterisk channels/chan_skinny.c SCCP (Skinny) Channel Driver Client Connection Termination Handling Remote DoS; 1.8.12.0; 10.4.0; 1.8.11-cert1; 10.5.0; OSVDB ID: 83040 Asterisk channels/chan_skinny.c SCCP (Skinny) Channel Driver Client Connection Termination Off Hook State NULL-Pointer Dereference Remote DoS; 10.5.0 rc2; OSVDB ID: 83040 Asterisk channels/chan_skinny.c SCCP (Skinny) Channel Driver Client Connection Termination Off Hook State NULL-Pointer Dereference Remote DoS; 10.5.0 rc1; OSVDB ID: 83040 Asterisk channels/chan_skinny.c SCCP (Skinny) Channel Driver Client Connection Termination Off Hook State NULL-Pointer Dereference Remote DoS; 10.0.0; OSVDB ID: 83040 Asterisk channels/chan_skinny.c SCCP (Skinny) Channel Driver Client Connection Termination Off Hook State NULL-Pointer Dereference Remote DoS; OSVDB ID: 78482 Asterisk SRTP Video Stream Negotiation Remote DoS; 10.0.0 beta1; OSVDB ID: 83040 Asterisk channels/chan_skinny.c SCCP (Skinny) Channel Driver Client Connection Termination Off Hook State NULL-Pointer Dereference Remote DoS; 10.0.0 beta2; OSVDB ID: 83040 Asterisk channels/chan_skinny.c SCCP (Skinny) Channel Driver Client Connection Termination Off Hook State NULL-Pointer Dereference Remote DoS; 10.0.0 rc1; OSVDB ID: 83040 Asterisk channels/chan_skinny.c SCCP (Skinny) Channel Driver Client Connection Termination Off Hook State NULL-Pointer Dereference Remote DoS; 10.0.0 rc2; OSVDB ID: 83040 Asterisk channels/chan_skinny.c SCCP (Skinny) Channel Driver Client Connection Termination Off Hook State NULL-Pointer Dereference Remote DoS; 10.0.0 rc3; OSVDB ID: 83040 Asterisk channels/chan_skinny.c SCCP (Skinny) Channel Driver Client Connection Termination Off Hook State NULL-Pointer Dereference Remote DoS; 10.0.1; OSVDB ID: 83040 Asterisk channels/chan_skinny.c SCCP (Skinny) Channel Driver Client Connection Termination Off Hook State NULL-Pointer Dereference Remote DoS; 10.1.0; OSVDB ID: 83040 Asterisk channels/chan_skinny.c SCCP (Skinny) Channel Driver Client Connection Termination Off Hook State NULL-Pointer Dereference Remote DoS; 10.1.0 rc1; OSVDB ID: 83040 Asterisk channels/chan_skinny.c SCCP (Skinny) Channel Driver Client Connection Termination Off Hook State NULL-Pointer Dereference Remote DoS; 10.1.0 rc2; OSVDB ID: 83040 Asterisk channels/chan_skinny.c SCCP (Skinny) Channel Driver Client Connection Termination Off Hook State NULL-Pointer Dereference Remote DoS; 10.1.1; OSVDB ID: 83040 Asterisk channels/chan_skinny.c SCCP (Skinny) Channel Driver Client Connection Termination Off Hook State NULL-Pointer Dereference Remote DoS; 10.1.2; OSVDB ID: 83040 Asterisk channels/chan_skinny.c SCCP (Skinny) Channel Driver Client Connection Termination Off Hook State NULL-Pointer Dereference Remote DoS; 10.1.3; OSVDB ID: 83040 Asterisk channels/chan_skinny.c SCCP (Skinny) Channel Driver Client Connection Termination Off Hook State NULL-Pointer Dereference Remote DoS; 10.2.0; 10.2.0 rc1; OSVDB ID: 83040 Asterisk channels/chan_skinny.c SCCP (Skinny) Channel Driver Client Connection Termination Off Hook State NULL-Pointer Dereference Remote DoS; 10.2.0 rc2; OSVDB ID: 83040 Asterisk channels/chan_skinny.c SCCP (Skinny) Channel Driver Client Connection Termination Off Hook State NULL-Pointer Dereference Remote DoS; 10.2.0 rc3; OSVDB ID: 83040 Asterisk channels/chan_skinny.c SCCP (Skinny) Channel Driver Client Connection Termination Off Hook State NULL-Pointer Dereference Remote DoS; 10.2.0 rc4; OSVDB ID: 83040 Asterisk channels/chan_skinny.c SCCP (Skinny) Channel Driver Client Connection Termination Off Hook State NULL-Pointer Dereference Remote DoS; 10.2.1; OSVDB ID: 83040 Asterisk channels/chan_skinny.c SCCP (Skinny) Channel Driver Client Connection Termination Off Hook State NULL-Pointer Dereference Remote DoS; 10.3.0; 10.3.0 rc2; OSVDB ID: 83040 Asterisk channels/chan_skinny.c SCCP (Skinny) Channel Driver Client Connection Termination Off Hook State NULL-Pointer Dereference Remote DoS; 10.3.0 rc3; OSVDB ID: 83040 Asterisk channels/chan_skinny.c SCCP (Skinny) Channel Driver Client Connection Termination Off Hook State NULL-Pointer Dereference Remote DoS; 10.3.1; OSVDB ID: 83040 Asterisk channels/chan_skinny.c SCCP (Skinny) Channel Driver Client Connection Termination Off Hook State NULL-Pointer Dereference Remote DoS; 10.4.0; 10.4.0 rc1; OSVDB ID: 83040 Asterisk channels/chan_skinny.c SCCP (Skinny) Channel Driver Client Connection Termination Off Hook State NULL-Pointer Dereference Remote DoS; 10.4.0 rc2; OSVDB ID: 83040 Asterisk channels/chan_skinny.c SCCP (Skinny) Channel Driver Client Connection Termination Off Hook State NULL-Pointer Dereference Remote DoS; 10.4.0 rc3; OSVDB ID: 83040 Asterisk channels/chan_skinny.c SCCP (Skinny) Channel Driver Client Connection Termination Off Hook State NULL-Pointer Dereference Remote DoS; 10.4.1; OSVDB ID: 83040 Asterisk channels/chan_skinny.c SCCP (Skinny) Channel Driver Client Connection Termination Off Hook State NULL-Pointer Dereference Remote DoS; 10.4.2; OSVDB ID: 83040 Asterisk channels/chan_skinny.c SCCP (Skinny) Channel Driver Client Connection Termination Off Hook State NULL-Pointer Dereference Remote DoS; Unspecified; OSVDB ID: 85069 Asterisk Peer IAX2 Call Handling ACL Rule Bypass; OSVDB ID: 85070 Asterisk Manager Interface ExternalIVR Application Originate Action Handling Remote Shell Command Execution; Unspecified; 1.8.8.1; OSVDB ID: 78482 Asterisk SRTP Video Stream Negotiation Remote DoS

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.