Bug 1715223 (CVE-2016-7550) - CVE-2016-7550 asterisk: crash via long contact URIs in REGISTER
Summary: CVE-2016-7550 asterisk: crash via long contact URIs in REGISTER
Keywords:
Status: CLOSED NOTABUG
Alias: CVE-2016-7550
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2019-05-29 20:04 UTC by Laura Pardo
Modified: 2021-02-16 21:53 UTC (History)
5 users (show)

Fixed In Version: asterisk 13.11.1
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2019-05-29 20:05:25 UTC
Embargoed:

Attachments (Terms of Use)

Description Laura Pardo 2019-05-29 20:04:56 UTC 
Asterisk can be crashed remotely by sending an ACK to it from an endpoint username that Asterisk does not recognize. Most SIP request types result in an “artificial” endpoint being looked up, but ACKs bypass this lookup. The resulting NULL pointer results in a crash when attempting to determine if ACLs should be applied. This issue was introduced in the Asterisk 13.10 release and only affects that release.
Comment 1 Laura Pardo 2019-05-29 20:05:00 UTC 
External References:

http://downloads.asterisk.org/pub/security/AST-2016-006.html
Note You need to log in before you can comment on or make changes to this bug.