Asterisk
  1. Asterisk
  2. ASTERISK-26938

Heap overflow in CSEQ header parsing affects Asterisk chan_pjsip and PJSIP

    Details

      Description

      I have included our draft report as an attachment. Please do let me know if this is uncomfortable for you and would like details here.

      1. README.md
        7 kB
        Sandro Gauci
      2. options2.raw
        2 kB
        Sandro Gauci
      3. options.xml
        2 kB
        George Joseph
      4. core-asterisk-1492008299.27652-thread1.txt
        6 kB
        George Joseph
      5. core-asterisk-1492008299.27652-locks.txt
        0.0 kB
        George Joseph
      6. core-asterisk-1492008299.27652-full.txt
        206 kB
        George Joseph
      7. core-asterisk-1492008299.27652-brief.txt
        70 kB
        George Joseph

        Issue Links

          Activity

          Hide
          Friendly Automation added a comment -

          Change 5659 merged by Jenkins2:
          AST-2017-002: Ensure transaction key buffer is large enough.

          https://gerrit.asterisk.org/5659

          Show
          Friendly Automation added a comment - Change 5659 merged by Jenkins2: AST-2017-002: Ensure transaction key buffer is large enough. https://gerrit.asterisk.org/5659
          Hide
          Friendly Automation added a comment -

          Change 5662 merged by George Joseph:
          AST-2017-002: Ensure transaction key buffer is large enough.

          https://gerrit.asterisk.org/5662

          Show
          Friendly Automation added a comment - Change 5662 merged by George Joseph: AST-2017-002: Ensure transaction key buffer is large enough. https://gerrit.asterisk.org/5662
          Hide
          Friendly Automation added a comment -

          Change 5671 merged by Matthew Fredrickson:
          AST-2017-002: Ensure transaction key buffer is large enough.

          https://gerrit.asterisk.org/5671

          Show
          Friendly Automation added a comment - Change 5671 merged by Matthew Fredrickson: AST-2017-002: Ensure transaction key buffer is large enough. https://gerrit.asterisk.org/5671
          Hide
          Friendly Automation added a comment -

          Change 5665 merged by Matthew Fredrickson:
          AST-2017-002: Ensure transaction key buffer is large enough.

          https://gerrit.asterisk.org/5665

          Show
          Friendly Automation added a comment - Change 5665 merged by Matthew Fredrickson: AST-2017-002: Ensure transaction key buffer is large enough. https://gerrit.asterisk.org/5665
          Hide
          Friendly Automation added a comment -

          Change 5668 merged by Matthew Fredrickson:
          AST-2017-002: Ensure transaction key buffer is large enough.

          https://gerrit.asterisk.org/5668

          Show
          Friendly Automation added a comment - Change 5668 merged by Matthew Fredrickson: AST-2017-002: Ensure transaction key buffer is large enough. https://gerrit.asterisk.org/5668

            People

            • Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Development