Fluid Attacks Database

Description

Asterisk is an open source private branch exchange and telephony toolkit. After upgrade to 18.23.0, ALL unauthorized SIP requests are identified as PJSIP Endpoint of local asterisk server. This vulnerability is fixed in 18.23.1, 20.8.1, and 21.3.1.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
alpine v3.20	asterisk	>=0 <20.8.1-r0	20.8.1-r0
alpine v3.17	asterisk	>=0 <18.24.3-r0	18.24.3-r0
alpine v3.18	asterisk	>=0 <18.24.3-r0	18.24.3-r0
alpine v3.19	asterisk	>=0 <20.9.3-r0	20.9.3-r0
alpine v3.21	asterisk	>=0 <20.8.1-r0	20.8.1-r0
alpine v3.22	asterisk	>=0 <20.8.1-r0	20.8.1-r0
alpine v3.23	asterisk	>=0 <20.8.1-r0	20.8.1-r0
alpine v3.24	asterisk	>=0 <20.8.1-r0	20.8.1-r0

Aliases

1. CVE-2024-351902. NVD-2024-351903. OSV-ALPINE-2024-351904. OSV-2024-351905. SECURITY-CVE-2024-35190

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.