vulnerability

Gentoo Linux: CVE-2020-35776: Asterisk: Multiple Vulnerabilities

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:M/Au:N/C:N/I:N/A:P)

Published

Feb 18, 2021

Added

Dec 9, 2024

Modified

Mar 31, 2026

Description

A buffer overflow in res_pjsip_diversion.c in Sangoma Asterisk versions 13.38.1, 16.15.1, 17.9.1, and 18.1.1 allows remote attacker to crash Asterisk by deliberately misusing SIP 181 responses.

Solution

gentoo-linux-upgrade-net-misc-asterisk

References

CVE-2020-35776
https://attackerkb.com/topics/CVE-2020-35776
CWE-120
EUVD-EUVD-2020-23431
GENTOO-202412-03
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-23431

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report