Описание
Asterisk is an open source private branch exchange and telephony toolkit. After upgrade to 18.23.0, ALL unauthorized SIP requests are identified as PJSIP Endpoint of local asterisk server. This vulnerability is fixed in 18.23.1, 20.8.1, and 21.3.1.
Ссылки
- Patch
- Issue TrackingPatch
- Issue TrackingPatch
- ExploitVendor Advisory
- Patch
- Issue TrackingPatch
- Issue TrackingPatch
- ExploitVendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:sangoma:asterisk:18.23.0:*:*:*:*:*:*:*
cpe:2.3:a:sangoma:asterisk:20.8.0:*:*:*:*:*:*:*
cpe:2.3:a:sangoma:asterisk:21.3.0:*:*:*:*:*:*:*
EPSS
Процентиль: 56%
0.00332
Низкий
5.8 Medium
CVSS3
5.3 Medium
CVSS3
Дефекты
CWE-303
Связанные уязвимости
CVSS3: 5.8
ubuntu
больше 1 года назад
Asterisk is an open source private branch exchange and telephony toolkit. After upgrade to 18.23.0, ALL unauthorized SIP requests are identified as PJSIP Endpoint of local asterisk server. This vulnerability is fixed in 18.23.1, 20.8.1, and 21.3.1.
CVSS3: 5.8
debian
больше 1 года назад
Asterisk is an open source private branch exchange and telephony toolk ...
EPSS
Процентиль: 56%
0.00332
Низкий
5.8 Medium
CVSS3
5.3 Medium
CVSS3
Дефекты
CWE-303