From 5f110469968b26f9a8f88da7f0af7c33cdc4415e Mon Sep 17 00:00:00 2001 From: madpilot Date: Thu, 29 Jan 2015 11:20:51 +0000 Subject: Document asterisk security issues. While here, add CVE number to a previous asterisk entry. --- security/vuxml/vuln.xml | 80 +++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 80 insertions(+) diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 11ae7890f4ea..ae94aee8560c 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -57,6 +57,85 @@ Notes: --> + + asterisk -- Mitigation for libcURL HTTP request injection vulnerability + + + asterisk + 1.8.32.2 + + + asterisk11 + 11.15.1 + + + asterisk13 + 13.1.1 + + + + +

The Asterisk project reports:

+
CVE-2014-8150 reported an HTTP request injection + vulnerability in libcURL. Asterisk uses libcURL in its + func_curl.so module (the CURL() dialplan function), as + well as its res_config_curl.so (cURL realtime backend) + modules.
+
Since Asterisk may be configured to allow for user-supplied + URLs to be passed to libcURL, it is possible that an + attacker could use Asterisk as an attack vector to inject + unauthorized HTTP requests if the version of libcURL + installed on the Asterisk server is affected by + CVE-2014-8150.
+

+ + + + http://downloads.asterisk.org/pub/security/AST-2015-002.html + + + 2015-01-12 + 2015-01-29 + + + + + asterisk -- File descriptor leak when incompatible codecs are offered + + + asterisk13 + 13.1.1 + + + + +

The Asterisk project reports:

+
Asterisk may be configured to only allow specific audio + or video codecs to be used when communicating with a + particular endpoint. When an endpoint sends an SDP offer + that only lists codecs not allowed by Asterisk, the offer + is rejected. However, in this case, RTP ports that are + allocated in the process are not reclaimed.
+
This issue only affects the PJSIP channel driver in + Asterisk. Users of the chan_sip channel driver are not + affected.
+
As the resources are allocated after authentication, + this issue only affects communications with authenticated + endpoints.
+

+ + + + http://downloads.asterisk.org/pub/security/AST-2015-001.html + + + 2015-01-06 + 2015-01-29 + + + glibc -- gethostbyname buffer overflow @@ -1372,6 +1451,7 @@ Notes: http://downloads.asterisk.org/pub/security/AST-2014-019.html + CVE-2014-9374 2014-10-30 -- cgit