CVE-2012-0885: Null Pointer Dereference
A denial of service flaw was found in the way asterisk processed certain requests to negotiate secure video stream, when the ressrtp Asterisk module has been loaded and video support has not been enabled. A remote attacker could provide a specially-crafted media stream negotiation request, which once processed by Asterisk would lead to asterisk daemon crash by processing crypto line for such media stream.
References: [1] http://downloads.asterisk.org/pub/security/AST-2012-001.html [2] https://issues.asterisk.org/jira/browse/ASTERISK-19202
Upstream patch against the v1.8.x branch: [3] http://downloads.asterisk.org/pub/security/AST-2012-001-1.8.diff
Upstream patch against the v1.10.x branch: [4] http://downloads.asterisk.org/pub/security/AST-2012-001-10.diff
Other sources
chansip.c in Asterisk Open Source 1.8.x before 1.8.8.2 and 10.x before 10.0.1, when the ressrtp module is used and media support is improperly configured, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted SDP message with a crypto attribute and a (1) video or (2) text media type, as demonstrated by CSipSimple.
— MITRE
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2012-0885?
CVE-2012-0885 is classified as a denial of service vulnerability.
How do I fix CVE-2012-0885?
To fix CVE-2012-0885, upgrade Asterisk to version 1.8.8.2 or 10.0.1 or later.
Which Asterisk versions are affected by CVE-2012-0885?
Asterisk versions prior to 1.8.8.2 and 10.0.1 are affected by CVE-2012-0885.
What kind of attack is possible with CVE-2012-0885?
An attacker could exploit CVE-2012-0885 by sending a specially-crafted media stream negotiation request to cause a denial of service.
Does CVE-2012-0885 impact users with video support enabled in Asterisk?
No, CVE-2012-0885 specifically affects Asterisk when the video support is not enabled.