Ehsan Foroughi

**Name of the Vulnerable Software and Affected Versions** Asterisk Open Source versions 1.8.x through 1.8.7.0 Asterisk Open Source versions 10.x through 10.0.0-rc0 **Description** The issue is related to the improper initialization of variables during request parsing in the SIP channel driver. This can be exploited by remote authenticated users to cause a denial of service, resulting in a daemon crash, via a malformed request. **Recommendations** For Asterisk Open Source versions 1.8.x through 1.8.7.0, update to version 1.8.7.1 or later. For Asterisk Open Source versions 10.x through 10.0.0-rc0, update to version 10.0.0-rc1 or later.