| Package | Affected versions | Patched versions |
|---|---|---|
| asterisk | ≥ 13.0.0, < 13.27.1≥ 15.0.0, < 15.7.3≥ 16.0.0, < 16.4.1 | 13.27.115.7.316.4.1 |
| certified asterisk | = 1.8.0.0= 1.8.1.0= 1.8.10.0= 1.8.11= 1.8.11.0= 1.8.12.0= 1.8.13.0= 1.8.14.0= 1.8.15= 1.8.2.0= 1.8.28= 1.8.28.0= 1.8.3.0= 1.8.4.0= 1.8.5.0= 1.8.6.0= 1.8.7.0= 1.8.8.0= 1.8.9.0= 11.0.0= 11.1.0= 11.2= 11.3.0= 11.4.0= 11.5.0= 11.6= 11.6.0= 13.1= 13.1.0= 13.13= 13.13-cert2= 13.18= 13.21= 13.8= 13.8.0 |
An issue was discovered in Asterisk Open Source through 13.27.0, 14.x and 15.x through 15.7.2, and 16.x through 16.4.0, and Certified Asterisk through 13.21-cert3. A pointer dereference in chan_sip while handling SDP negotiation allows an attacker to crash Asterisk when handling an SDP answer to an outgoing T.38 re-invite. To exploit this vulnerability an attacker must cause the chan_sip module to send a T.38 re-invite request to them. Upon receipt, the attacker must send an SDP answer containing both a T.38 UDPTL stream and another media stream containing only a codec (which is not permitted according to the chan_sip configuration).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free