Git-Url: http://git.frugalware.org/gitweb/gitweb.cgi?p=homepage-ng.git;a=commitdiff;h=f4a0b1dc3cd34f32e39c4a1b33ff5894c1d6da68
commit f4a0b1dc3cd34f32e39c4a1b33ff5894c1d6da68 Author: Miklos Vajna <[EMAIL PROTECTED]> Date: Fri Jun 13 16:26:38 2008 +0200 FSA456-asterisk-addons diff --git a/frugalware/xml/security.xml b/frugalware/xml/security.xml index 4f01810..9d9eb48 100644 --- a/frugalware/xml/security.xml +++ b/frugalware/xml/security.xml @@ -26,6 +26,17 @@ <fsas> <fsa> + <id>456</id> + <date>2008-06-13</date> + <package>asterisk-addons</package> + <vulnerable>1.4.4-1</vulnerable> + <unaffected>1.4.7-1kalgan1</unaffected> + <bts>http://bugs.frugalware.org/task/3136</bts> + <cve>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2543</cve> + <desc>A vulnerability has been reported in Asterisk Addons, which can be exploited by malicious people to cause a DoS (Denial of Service). + The problem is that the "ooh323" channel driver extracts memory addresses from incoming TCP packets and uses them in memory operations. This can be exploited to crash an affected application by sending a TCP packet containing invalid memory references.</desc> + </fsa> + <fsa> <id>455</id> <date>2008-06-13</date> <package>samba</package> _______________________________________________ Frugalware-git mailing list [email protected] http://frugalware.org/mailman/listinfo/frugalware-git
