Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7mmh-v685-w5gw

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Use-after-free vulnerability in the PJSIP channel driver in Asterisk Open Source 12.x before 12.7.1 and 13.x before 13.0.1, when using the res_pjsip_refer module, allows remote attackers to cause a denial of service (crash) via an in-dialog INVITE with Replaces message, which triggers the channel to be hung up.

Use-after-free vulnerability in the PJSIP channel driver in Asterisk Open Source 12.x before 12.7.1 and 13.x before 13.0.1, when using the res_pjsip_refer module, allows remote attackers to cause a denial of service (crash) via an in-dialog INVITE with Replaces message, which triggers the channel to be hung up.

EPSS

Процентиль: 77%
0.01066
Низкий

Дефекты

CWE-20

Связанные уязвимости

ubuntu
около 11 лет назад

Use-after-free vulnerability in the PJSIP channel driver in Asterisk Open Source 12.x before 12.7.1 and 13.x before 13.0.1, when using the res_pjsip_refer module, allows remote attackers to cause a denial of service (crash) via an in-dialog INVITE with Replaces message, which triggers the channel to be hung up.

nvd
около 11 лет назад

Use-after-free vulnerability in the PJSIP channel driver in Asterisk Open Source 12.x before 12.7.1 and 13.x before 13.0.1, when using the res_pjsip_refer module, allows remote attackers to cause a denial of service (crash) via an in-dialog INVITE with Replaces message, which triggers the channel to be hung up.

debian
около 11 лет назад

Use-after-free vulnerability in the PJSIP channel driver in Asterisk O ...

EPSS

Процентиль: 77%
0.01066
Низкий

Дефекты

CWE-20