Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The IAX2 channel driver (chan_iax2) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote attackers to cause a denial of service (crash) via a crafted (1) LAGRQ or (2) LAGRP frame that contains information elements of IAX frames, which results in a NULL pointer dereference when Asterisk does not properly set an associated variable.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Asterisk IAX2 隧道驱动拒绝服务攻击漏洞
Vulnerability Description
Asterisk是开放源码的软件PBX，支持各种VoIP协议和设备。 Asterisk IAX2的隧道驱动(chan_iax2)中存在拒绝服务漏洞。如果Asterisk在有效会话中接收到了LAGRQ或LAGRP帧，就可能触发空指针异常。负责解析入站帧的代码可以正确地解析IAX帧中的信息单元，然后将指针设置为空表示没有与这个帧相关的原始数据负载，但没有将原始负载中用于表示字节数的变量设置为0。由于原始数据长度为非0，处理LAGRQ和LAGRP帧的代码就会试图从空指针拷贝数据，导致崩溃。
CVSS Information
N/A
Vulnerability Type
N/A