| Package | Affected versions | Patched versions |
|---|---|---|
| asterisk | ≤ 1.4.9 | |
| asterisk appliance developer kit | ≤ 0.6.0 | |
| asterisknow | ≤ beta_6 | |
| s800i | ≤ 1.0.2 |
The Skinny channel driver (chan_skinny) in Asterisk Open Source before 1.4.10, AsteriskNOW before beta7, Appliance Developer Kit before 0.7.0, and Appliance s800i before 1.0.3 allows remote authenticated users to cause a denial of service (application crash) via a CAPABILITIES_RES_MESSAGE packet with a capabilities count larger than the capabilities_res_message array population.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free