An issue was discovered in Sangoma Asterisk 13.x before 13.38.3, 16.x before 16.19.1, 17.x before 17.9.4, and 18.x before 18.5.1, and Certified Asterisk before 16.8-cert10. If the IAX2 channel driver receives a packet that contains an unsupported media format, a crash can occur.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-asterisk | Mar 26, 2024 | Jul 27, 2021 | |
| Debian | debian-upgrade-asterisk | Aug 5, 2021 | Jul 30, 2021 | |
| Freebsd | freebsd-upgrade-package-asterisk13freebsd-upgrade-package-asterisk16freebsd-upgrade-package-asterisk18 | Nov 4, 2022 | Jul 23, 2021 | |
| Gentoo Linux | gentoo-linux-upgrade-net-misc-asterisk | Dec 9, 2024 | Jul 30, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub