oss-sec mailing list archives

Re: CVE Request -- Asterisk AST-2011-002 / Multiple array overflow and crash vulnerabilities in UDPTL code

From: Matthew Nicholson <mnicholson () digium com>
Date: Fri, 11 Mar 2011 14:58:30 -0600

On Fri, 2011-03-11 at 15:46 -0500, Josh Bressers wrote:


----- Original Message -----

Hello Josh, Steve, vendors,

this doesn't seem to have a CVE identifier yet:
[1] http://downloads.asterisk.org/pub/security/AST-2011-002.html
[2] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=614580


Please use CVE-2011-1147

Thanks.


The advisory on our website has been updated.
-- 
Matthew Nicholson
Digium, Inc. | Software Developer

Current thread:

CVE Request -- Asterisk AST-2011-002 / Multiple array overflow and crash vulnerabilities in UDPTL code Jan Lieskovsky (Mar 11)
- Re: CVE Request -- Asterisk AST-2011-002 / Multiple array overflow and crash vulnerabilities in UDPTL code Josh Bressers (Mar 11)
  - Re: CVE Request -- Asterisk AST-2011-002 / Multiple array overflow and crash vulnerabilities in UDPTL code Matthew Nicholson (Mar 11)