Archive for the ‘iax poke’ tag
Suspect: Asterisk Resource Exhaustion
During The Last HOPE an IAX Resource Exhaustion 0day DoS was released for the Asterisk PBX. This 0day was in the wild for 4 days before a patch was released.
During these four days, any attacker could have attacked any publicly accessible Asterisk server and forced it to stop processing all phone calls. What [...]