Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The SIP channel driver (chan_sip) in Asterisk Open Source 1.4.x before 1.4.11, AsteriskNOW before beta7, Asterisk Appliance Developer Kit 0.x before 0.8.0, and s800i (Asterisk Appliance) 1.x before 1.0.3 allows remote attackers to cause a denial of service (memory exhaustion) via a SIP dialog that causes a large number of history entries to be created.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Asterisk SIP对话历史记录资源耗尽漏洞
Vulnerability Description
Asterisk是开放源码的软件PBX，支持各种VoIP协议和设备。 Asterisk在记录日志功能的实现上存在漏洞，远程攻击者可能利用此漏洞导致设备不可用。 无论是打开还是关闭了记录SIP对话历史这个功能，Asterisk都允许用户在内存中记录历史，且对记录的条目没有设置上限，因此攻击者可以创建会在历史中记录很多条目的SIP对话，导致耗尽所有的系统内存。
CVSS Information
N/A
Vulnerability Type
N/A