Описание
main/translate.c in Sangoma Asterisk 13.28.0 and 16.5.0 allows a remote attacker to send a specific RTP packet during a call and cause a crash in a specific scenario.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| asterisk | not-affected | package |
Примечания
https://downloads.asterisk.org/pub/security/AST-2019-005.html
https://issues.asterisk.org/jira/browse/ASTERISK-28499
Issue was introduced specifically only in versions 13.28.0 and 16.5.0 upstream
and got fixed in 13.28.1 respectively 16.5.1.
EPSS
Связанные уязвимости
main/translate.c in Sangoma Asterisk 13.28.0 and 16.5.0 allows a remote attacker to send a specific RTP packet during a call and cause a crash in a specific scenario.
main/translate.c in Sangoma Asterisk 13.28.0 and 16.5.0 allows a remote attacker to send a specific RTP packet during a call and cause a crash in a specific scenario.
main/translate.c in Sangoma Asterisk 13.28.0 and 16.5.0 allows a remote attacker to send a specific RTP packet during a call and cause a crash in a specific scenario.
ALT-PU-2020-2313: package `asterisk` update to version 17.5.1-alt1
EPSS