| Package | Affected versions | Patched versions |
|---|---|---|
| asterisk | = 13.0.0= 13.0.1= 13.0.2= 13.1.0= 13.1.1= 13.10.0= 13.11.0= 13.11.1= 13.11.2= 13.12= 13.12.0= 13.12.1= 13.12.2= 13.13= 13.13.0= 13.13.1= 13.14.0= 13.14.1= 13.15.0= 13.15.1= 13.16.0= 13.17.0= 13.2.0= 13.2.1= 13.3.0= 13.3.2= 13.4.0= 13.5.0= 13.6.0= 13.7.0= 13.7.1= 13.7.2= 13.8.0= 13.8.1= 13.8.2= 13.9.0= 13.9.1= 14.0= 14.0.0= 14.0.1= 14.0.2= 14.01= 14.02= 14.1= 14.1.0= 14.1.1= 14.1.2= 14.2= 14.2.0= 14.2.1= 14.3.0= 14.3.1= 14.4.0= 14.4.1= 14.5.0= 14.6.0 |
In the pjsip channel driver (res_pjsip) in Asterisk 13.x before 13.17.1 and 14.x before 14.6.1, a carefully crafted tel URI in a From, To, or Contact header could cause Asterisk to crash.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free