SIP: CSEQ Too Long
This signature triggers on traffic containing SIP CSeq: headers longer than 32 bytes, which can indicate a potential issue.
Extended Description
Asterisk is prone to multiple remote denial-of-service vulnerabilities. Successful exploits can crash the SIP channel driver, resulting in denial-of-service conditions for legitimate users. The issues affect the Asterisk 1.6.1. NOTE: Other versions may also include the affected code but may not be exploitable because they do not allow SIP packets to exceed 1500 bytes total.
Affected Products
Red_hat fedora
Short Name
VOIP:SIP:LIMITS:CSEQ-OF
Severity
Major
Recommended
False
Recommended Action
Drop Packet
Category
VOIP
Keywords
CSEQ CVE-2009-2726 Long Too bid:36015
Release Date
07/18/2007
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3728
False Positive
Unknown
Vendors
Red_hat
Asterisk
Gentoo
CVSS Score
7.8