Asymmetric denial of service In asterisk
Description
An issue was discovered in Sangoma Asterisk 16.x before 16.16.1, 17.x before 17.9.2, and 18.x before 18.2.1 and Certified Asterisk before 16.8-cert6. When re-negotiating for T.38, if the initial remote response was delayed just enough, Asterisk would send both audio and T.38 in the SDP. If this happened, and the remote responded with a declined T.38 stream, then Asterisk would crash.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 alpine v3.12 | 16.16.1-r0 | ||
alpine v3.21 | 18.2.1-r0 | ||
alpine v3.13 | 18.2.1-r0 | ||
alpine v3.14 | 18.2.1-r0 | ||
alpine v3.15 | 18.2.1-r0 | ||
alpine v3.16 | 18.2.1-r0 | ||
alpine v3.17 | 18.2.1-r0 | ||
alpine v3.18 | 18.2.1-r0 | ||
alpine v3.19 | 18.2.1-r0 | ||
alpine v3.20 | 18.2.1-r0 |
1-10 of 14
10
Aliases
1. 2. 3. 4. 5. 6. 7.