| Package | Affected versions | Patched versions |
|---|---|---|
| asterisk | < 18.26.4 | 18.26.4 |
| certified asterisk | = 18.9< 18.9 | 18.9 |
Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 18.26.4 and 18.9-cert17, RTP UDP ports and internal resources can leak due to a lack of session termination. This could result in leaks and resource exhaustion. This issue has been patched in versions 18.26.4 and 18.9-cert17.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free