Lack of data validation - Type confusion In asterisk
Description
A stack-based buffer overflow in res_rtp_asterisk.c in Sangoma Asterisk before 16.16.1, 17.x before 17.9.2, and 18.x before 18.2.1 and Certified Asterisk before 16.8-cert6 allows an authenticated WebRTC client to cause an Asterisk crash by sending multiple hold/unhold requests in quick succession. This is caused by a signedness comparison mismatch.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 alpine v3.16 | 18.2.1-r0 | ||
alpine v3.22 | 18.2.1-r0 | ||
alpine v3.20 | 18.2.1-r0 | ||
alpine v3.13 | 18.2.1-r0 | ||
alpine v3.14 | 18.2.1-r0 | ||
alpine v3.12 | 16.16.1-r0 | ||
alpine v3.15 | 18.2.1-r0 | ||
alpine v3.17 | 18.2.1-r0 | ||
alpine v3.18 | 18.2.1-r0 | ||
alpine v3.19 | 18.2.1-r0 |
1-10 of 13
10
Aliases
1. 2. 3. 4. 5.