Lack of data validation In asterisk
Description
An issue was discovered in res_pjsip_session.c in Digium Asterisk through 13.38.1; 14.x, 15.x, and 16.x through 16.16.0; 17.x through 17.9.1; and 18.x through 18.2.0, and Certified Asterisk through 16.8-cert5. An SDP negotiation vulnerability in PJSIP allows a remote server to potentially crash Asterisk by sending specific SIP responses that cause an SDP negotiation failure.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 alpine v3.15 | 18.2.1-r0 | ||
alpine v3.14 | 18.2.1-r0 | ||
alpine v3.12 | 16.16.1-r0 | ||
alpine v3.13 | 18.2.1-r0 | ||
alpine v3.16 | 18.2.1-r0 | ||
alpine v3.17 | 18.2.1-r0 | ||
alpine v3.18 | 18.2.1-r0 | ||
alpine v3.19 | 18.2.1-r0 | ||
alpine v3.20 | 18.2.1-r0 | ||
alpine v3.21 | 18.2.1-r0 |
1-10 of 14
10
Aliases
1. 2. 3. 4. 5. 6. 7.