Asterisk Voice Mail Denial Of Service Vulnerability

http://www.securityfocus.com/bid/54317

Security Info

Bugtraq ID:	54317
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2012-3812
Remote:	Yes
Local:	No
Published:	Jul 05 2012 12:00AM
Updated:	Jul 05 2012 12:00AM
Credit:	Nicolas Bouliane
Vulnerable:	Asterisk Certified Asterisk 1.8.11-cert2 Asterisk Certified Asterisk 1.8.11-cert1 Asterisk Asterisk 10.4.1 Asterisk Asterisk 10.3.1 Asterisk Asterisk 10.3.0 Asterisk Asterisk 1.8.12.1 Asterisk Asterisk 1.8.11.1 Asterisk Asterisk 1.8.11.0

Not Vulnerable:

Security Discussion

Asterisk is prone to a remote denial-of-service vulnerability.

Attackers can exploit this issue to cause the server to crash, resulting in a denial-of-service condition.

Proof of Concept and Security Exploits

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: vuldb@securityfocus.com.

Security Solution(s)

Solution:
Updates are available. Please see the references for more information.

Security References(s)

References:

Asterisk Homepage (Asterisk)

Emagined Security Blog featuring Dr. Eugene Schultz

Secure Web Programming
by Vizual Services