Javantea

**Name of the Vulnerable Software and Affected Versions** ImageMagick version 6.9.7 **Description** An issue in ImageMagick allows incorrect TGA files to trigger assertion failures, leading to a denial of service. **Recommendations** For ImageMagick version 6.9.7, at the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** libreswan versions 3.9 through 3.12 **Description** The issue allows remote attackers to cause a denial of service, resulting in a daemon restart, via an IKEv1 packet with specific characteristics, such as unassigned bits set in the IPSEC DOI value or the next payload value set to ISAKMP NEXT SAK. A flaw was discovered in the way Libreswan's IKE daemon processed certain IKEv1 payloads, which could lead to a denial of service when specially crafted IKEv1 payloads are sent. **Recommendations** For libreswan versions 3.9 through 3.12, consider restricting the processing of IKEv1 packets with unassigned bits set in the IPSEC DOI value or the next payload value set to ISAKMP NEXT SAK to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** strongSwan versions 5.2.2 through 5.3.0 **Description** The issue allows remote attackers to cause a denial of service, resulting in a daemon crash, or potentially execute arbitrary code. **Recommendations** For strongSwan versions 5.2.2 through 5.3.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** IPsec-Tools version 0.8.2 **Description** The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and IKE daemon crash, via a series of crafted UDP requests. **Recommendations** For IPsec-Tools version 0.8.2, update to a version that fixes the issue in racoon/gssapi.c to prevent remote attackers from causing a denial of service.

**Name of the Vulnerable Software and Affected Versions** Asterisk Open Source versions 1.0.x through 1.2.27 and versions 1.4.x through 1.4.18 Asterisk Business Edition versions A.x.x through B.2.5.1 and versions C.x.x through C.1.8.0 AsteriskNOW versions prior to 1.0.3 Appliance Developer Kit versions 0.x.x s800i versions prior to 1.1.0.3 **Description** The issue allows remote attackers to cause a denial of service via a spoofed ACK response that does not complete a 3-way handshake, resulting in traffic amplification. This occurs when the IAX2 channel driver is configured to allow unauthenticated calls and fails to verify that an ACK response contains a call number matching the server's reply to a NEW message. **Recommendations** For Asterisk Open Source versions 1.0.x through 1.2.27, update to version 1.2.28 or later. For Asterisk Open Source versions 1.4.x through 1.4.18, update to version 1.4.19.1 or later. For Asterisk Business Edition versions A.x.x through B.2.5.1, update to version B.2.5.2 or later. For Asterisk Business Edition versions C.x.x through C.1.8.0, update to version C.1.8.1 or later. For AsteriskNOW versions prior to 1.0.3, update to version 1.0.3 or later. For Appliance Developer Kit versions 0.x.x, there is no information about a newer version that contains a fix for this issue. For s800i versions prior to 1.1.0.3, update to version 1.1.0.3 or later.

**Name of the Vulnerable Software and Affected Versions** Asterisk versions 1.2 before revision 72630 Asterisk versions 1.4 before revision 65679 **Description** The issue allows remote attackers to cause a denial of service, specifically traffic amplification, via a spoofed NEW message. This occurs when the IAX2 channel driver is configured to allow unauthenticated calls, sending "early audio" to an unverified source IP address of a NEW message. **Recommendations** For Asterisk version 1.2, update to revision 72630 or later. For Asterisk version 1.4, update to revision 65679 or later.