Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2020-2313

Критический

ALT-PU-2020-2313: package asterisk update to version 17.5.1-alt1

Источник
errata.altlinux.org
Дата публикации
06.07.2020
Дата обновления
06.07.2020
Устраненные уязвимости
13

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades asterisk to version 17.5.1-alt1.

Устраненные уязвимости13

Связанные уязвимости

CVSS3: 6.5
ubuntu
около 7 лет назад

res_pjsip_t38 in Sangoma Asterisk 15.x before 15.7.4 and 16.x before 16.5.1 allows an attacker to trigger a crash by sending a declined stream in a response to a T.38 re-invite initiated by Asterisk. The crash occurs because of a NULL session media object dereference.

CVSS3: 6.5
nvd
около 7 лет назад

res_pjsip_t38 in Sangoma Asterisk 15.x before 15.7.4 and 16.x before 16.5.1 allows an attacker to trigger a crash by sending a declined stream in a response to a T.38 re-invite initiated by Asterisk. The crash occurs because of a NULL session media object dereference.

CVSS3: 6.5
debian
около 7 лет назад

res_pjsip_t38 in Sangoma Asterisk 15.x before 15.7.4 and 16.x before 1 ...

CVSS3: 6.5
github
больше 4 лет назад

res_pjsip_t38 in Sangoma Asterisk 13.21-cert4, 15.7.3, and 16.5.0 allows an attacker to trigger a crash by sending a declined stream in a response to a T.38 re-invite initiated by Asterisk.

CVSS3: 7.5
ubuntu
около 7 лет назад

main/translate.c in Sangoma Asterisk 13.28.0 and 16.5.0 allows a remote attacker to send a specific RTP packet during a call and cause a crash in a specific scenario.