| Package | Affected versions | Patched versions |
|---|---|---|
| open source | = 11.0.0= 11.0.1= 11.0.2= 11.1.0= 11.1.1= 11.1.2= 11.2.0= 11.2.1 |
Stack-based buffer overflow in res/res_format_attr_h264.c in Asterisk Open Source 11.x before 11.2.2 allows remote attackers to execute arbitrary code via a long sprop-parameter-sets H.264 media attribute in a SIP Session Description Protocol (SDP) header.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free