Fluid Attacks Database

Description

An issue was discovered in Sangoma Asterisk 13.x before 13.38.3, 16.x before 16.19.1, 17.x before 17.9.4, and 18.x before 18.5.1, and Certified Asterisk before 16.8-cert10. If the IAX2 channel driver receives a packet that contains an unsupported media format, a crash can occur.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
alpine v3.20	asterisk	>=13.0.0 <18.2.2-r2	18.2.2-r2
alpine v3.24	asterisk	>=13.0.0 <18.2.2-r2	18.2.2-r2
alpine v3.11	asterisk	>=13.0.0 <16.6.2-r1	16.6.2-r1
alpine v3.12	asterisk	>=13.0.0 <16.16.1-r1	16.16.1-r1
alpine v3.13	asterisk	>=13.0.0 <18.2.1-r2	18.2.1-r2
alpine v3.14	asterisk	>=13.0.0 <18.2.2-r2	18.2.2-r2
alpine v3.15	asterisk	>=13.0.0 <18.2.2-r2	18.2.2-r2
alpine v3.16	asterisk	>=13.0.0 <18.2.2-r2	18.2.2-r2
alpine v3.17	asterisk	>=13.0.0 <18.2.2-r2	18.2.2-r2
alpine v3.18	asterisk	>=13.0.0 <18.2.2-r2	18.2.2-r2

1-10 of 15

Aliases

1. CVE-2021-325582. NVD-2021-325583. OSV-ALPINE-2021-325584. OSV-2021-325585. OSV-DEBIAN-2021-325586. SECURITY-CVE-2021-325587. SECURITY-TRACKER-CVE-2021-32558

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.