vulnerability

FreeBSD: VID-8dd438ed-a338-11ed-b48b-589cfc0f81b0 (CVE-2022-42705): Asterisk -- multiple vulnerabilities

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:S/C:N/I:N/A:C)

Published

Feb 2, 2023

Added

Feb 4, 2023

Modified

Jun 15, 2026

Description

A use-after-free in res_pjsip_pubsub.c in Sangoma Asterisk 16.28, 18.14, 19.6, and certified/18.9-cert2 may allow a remote authenticated attacker to crash Asterisk (denial of service) by performing activity on a subscription via a reliable transport at the same time that Asterisk is also performing activity on that subscription.

Solution

freebsd-upgrade-package-asterisk18

References

CVE-2022-42705
https://attackerkb.com/topics/CVE-2022-42705
CWE-416
EUVD-EUVD-2022-45771
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-45771

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report