Asterisk Product Denial of Service Vulnerabilities

Multiple vulnerabilities has been identified in Asterisk, which can be exploited by remote authenticated user to denial of service attack.

1. A remote authenticated user can respond to a re-invite with a provisional response and not send a final response to cause the remote system to fail to clear the RTP port. This can be exploited to consume all available RTP ports on the target system
2. Two remote authenticated users can manipulate a single voicemail account simultaneously to trigger a double free memory error or out-of-bounds array access error and the target service to crash.