Colin Cuthbertson and Walter Doekes discovered two vulnerabilities in the SIP processing code of Asterisk - an open source PBX and telephony toolkit -, which could result in denial of service.

For the oldstable distribution (squeeze), these problems have been fixed in version 1:1.6.2.9-2+squeeze11. For the stable distribution (wheezy), these problems have been fixed in version 1.8.13.1~dfsg-3+deb7u1. For the unstable distribution (sid), these problems will be fixed soon. We recommend that you upgrade your asterisk packages.

Asterisk is an Open Source PBX and telephony toolkit. It is, in a sense, middleware between Internet and telephony channels on the bottom, and Internet and telephony applications at the top.

asterisk on Debian Linux

This check tests the installed software version using the apt package manager.

• http://www.debian.org/security/2013/dsa-2749.html

---

Updated on 2015-03-25