oss-security - Re: CVE Request -- Asterisk: Stack-based buffer overflow by forming an outgoing SIP request with specially-crafted caller ID information (AST-2011-001)

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <Pine.GSO.4.64.1101190721080.9694@faron.mitre.org>
Date: Wed, 19 Jan 2011 07:21:36 -0500 (EST)
From: "Steven M. Christey" <coley@...-smtp.mitre.org>
To: oss-security <oss-security@...ts.openwall.com>
cc: "Steven M. Christey" <coley@...-smtp.mitre.org>,
        Matthew Nicholson <mnicholson@...ium.com>
Subject: Re: CVE Request -- Asterisk: Stack-based buffer
 overflow by forming an outgoing SIP request with specially-crafted caller
 ID information (AST-2011-001)


On Wed, 19 Jan 2011, Jan Lieskovsky wrote:

>  Asterisk upstream yesterday released AST-2011-001, also with patches for 
> supported versions.
>  References:
>  [1] http://downloads.asterisk.org/pub/security/AST-2011-001.html
>  [2] http://seclists.org/fulldisclosure/2011/Jan/297
>  [3] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=610487
>  [4] https://bugzilla.redhat.com/show_bug.cgi?id=670777

Use CVE-2011-0495

- Steve

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.