[CVE-2008-2119] Remote Crash Vulnerability in SIP channel driver when run in pedantic mode

[Till Ulen]

Binary package hint: asterisk

CVE-2008-2119 description from the upstream advisory AST-2008-008:

"During pedantic SIP processing the From header value is
passed to the ast_uri_decode function to be decoded. In
two instances it is possible for the code to cause a
crash as the From header value is not checked to be
non-NULL before being passed to the function."

http://www.securityfocus.com/archive/1/493020

Links for future reference:
http://www.asterisk.org/security (advisory not available yet)
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2119 (details hidden as of now)

[Jamie Strandboge (jdstrand)]

Marking Fix Released as this should be fixed in all supported releases.