Vendor Status Note JVNCIAC-R-330

Asterisk に複数の脆弱性

ソフトウェア PBX の Asterisk には複数の脆弱性があります。

遠隔の第三者が任意のコードを実行したり、サービス運用妨害 (DoS) 攻撃を行ったり、機密情報を取得したりする可能性があります。

ベンダ	リンク	更新日
Debian	Debian Security Advisory DSA-1358 asterisk -- several vulnerabilities
Digium, Inc	Asterisk :: The Open Source Telephony Platform

1. ISS X-Force Database: asterisk-sip-channeldriver-dos(32830)
   Asterisk SIP channel driver denial of service
2. ISS X-Force Database: asterisk-sip-invite-dos(33068)
   Asterisk SIP INVITE denial of service
3. ISS X-Force Database: asterisk-interface-dos(33886)
   Asterisk Management Interface denial of service
4. ISS X-Force Database: asterisk-sip-response-dos(33892)
   Asterisk SIP response packets denial of service
5. ISS X-Force Database: asterisk-iax2-information-disclosure(34085)
   Asterisk IAX2 information disclosure
6. ISS X-Force Database: asterisk-iax2channeldriver-bo(35466)
   Asterisk IAX2 channel driver buffer overflow
7. ISS X-Force Database: asterisk-iax2-dos(35465)
   Asterisk IAX2 channel driver denial of service
8. ISS X-Force Database: asterisk-skinny-driver-dos(35478)
   Asterisk Skinny driver denial of service