Multiple Asterisk Products Invalid SDP Denial of Service Vulnerability

Bugtraq ID:	62022
Class:	Unknown
CVE:	CVE-2013-5642
Remote:	Yes
Local:	No
Published:	Aug 27 2013 12:00AM
Updated:	Apr 16 2015 05:50PM
Credit:	Walter Doekes, OSSO B.V.
Vulnerable:	Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 Asterisk Asterisk Open Source 1.8.3.1
Not Vulnerable:

Multiple Asterisk Products Invalid SDP Denial of Service Vulnerability

Multiple Asterisk products are prone to a remote denial-of-service vulnerability.

Attackers can exploit this issue to crash the application, resulting in denial-of-service conditions.

The following products are vulnerable:

Asterisk Open Source
Certified Asterisk
Asterisk Digiumphones

Multiple Asterisk Products Invalid SDP Denial of Service Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Multiple Asterisk Products Invalid SDP Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Multiple Asterisk Products Invalid SDP Denial of Service Vulnerability

References:

• Asterisk Homepage (Asterisk)