Vulnerabilities > CVE-2009-2651 - Unspecified vulnerability in Digium Asterisk 1.6.1

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
digium
nessus
NVD
Published: 2009-07-30
Updated: 2024-11-21

Summary

main/rtp.c in Asterisk Open Source 1.6.1 before 1.6.1.2 allows remote attackers to cause a denial of service (crash) via an RTP text frame without a certain delimiter, which triggers a NULL pointer dereference and the subsequent calculation of an invalid pointer.

Vulnerable Configurations

Part Description Count
Application
Digium
1

Nessus

NASL familyFedora Local Security Checks
NASL idFEDORA_2009-9405.NASL
descriptionUpdate to 1.6.1.6 to fix many bugs... Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
last seen2020-06-01
modified2020-06-02
plugin id41633
published2009-09-28
reporterThis script is Copyright (C) 2009-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
sourcehttps://www.tenable.com/plugins/nessus/41633
titleFedora 11 : asterisk-1.6.1.6-1.fc11 (2009-9405)

References