VOIP: Digium Asterisk UDPTL Processing Heap Buffer Overflow

This signature detects attempts to exploit a known vulnerability against Digium Asterisk. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the affected server.

Extended Description

Asterisk is prone to multiple remote buffer-overflow vulnerabilities because the application fails to perform adequate boundary checks on user-supplied data. An attacker can exploit these issues to execute arbitrary code within the context of the affected application or to crash the application, denying service to legitimate users.

Affected Products

Debian linux

References

BugTraq: 46474

Short Name
VOIP:SIP:ASTERISK-UDPTL-BO
Severity
Major
Recommended
False
Recommended Action
None
Category
VOIP
Keywords
Asterisk Buffer Digium Heap Overflow Processing UDPTL bid:46474
Release Date
01/08/2013
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3375
False Positive
Unknown
Vendors

Red_hat

Asterisk

Debian

Gentoo

Found a potential security threat?