Lack of data validation In asterisk
Description
An issue was discovered in res_pjsip_diversion.c in Sangoma Asterisk before 13.38.0, 14.x through 16.x before 16.15.0, 17.x before 17.9.0, and 18.x before 18.1.0. A crash can occur when a SIP message is received with a History-Info header that contains a tel-uri, or when a SIP 181 response is received that contains a tel-uri in the Diversion header.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 alpine v3.12 | 16.15.1-r0 | ||
alpine v3.13 | 18.1.1-r0 | ||
alpine v3.14 | 18.1.1-r0 | ||
alpine v3.15 | 18.1.1-r0 | ||
alpine v3.19 | 18.1.1-r0 | ||
alpine v3.23 | 18.1.1-r0 | ||
alpine v3.16 | 18.1.1-r0 | ||
alpine v3.17 | 18.1.1-r0 | ||
alpine v3.18 | 18.1.1-r0 | ||
alpine v3.20 | 18.1.1-r0 |
1-10 of 14
10
Aliases
1. 2. 3. 4. 5. 6. 7.