| Package | Affected versions | Patched versions |
|---|---|---|
| asterisk business edition | = b.2.3.4= b.2.3.5= b.2.5.0= b.2.5.1= b.2.5.3 | |
| open source | = 1.2.26= 1.2.26.1= 1.2.26.2= 1.2.27= 1.2.28= 1.2.29= 1.2.30= 1.2.30.2= 1.2.30.3 |
Asterisk Open Source 1.2.26 through 1.2.30.3 and Business Edition B.2.3.5 through B.2.5.5, when realtime IAX2 users are enabled, allows remote attackers to cause a denial of service (crash) via authentication attempts involving (1) an unknown user or (2) a user using hostname matching.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free