CVE-2021-31878

MEDIUM 6.5CVE-2021-31878 · Published 30/07/2021 · updated 17/06/2026

Package	Affected versions	Patched versions
asterisk digium	`= 16.17.0= 16.18.0= 16.19.0= 18.3.0= 18.4.0= 18.5.0`	No fix yet

Description

An issue was discovered in PJSIP in Asterisk before 16.19.1 and before 18.5.1. To exploit, a re-INVITE without SDP must be received after Asterisk has sent a BYE request.

References

downloads.asterisk.org/pub/security/AST-2021-007.html · Patch
packetstormsecurity.com/files/163638/Asterisk-Project-Security-Advisory-AST-2021-007.html · Patch
seclists.org/fulldisclosure/2021/Jul/48 · Mailing List
downloads.digium.com/pub/security/AST-2021-007.html · Patch
issues.asterisk.org/jira/browse/ASTERISK-29381 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free