Skip to content
OpenAdvisories
High WID-SEC-2022-2108 3 CVEs

Asterisk: Mehrere Schwachstellen

Published Mar 6, 2022 · Updated Mar 24, 2026 · Revision 4 · de-DE

Vendor: Debian Vendor: Digium Vendor: Ubuntu Product: Certified Asterisk Product: Linux Product: Linux Platform: Linux Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Asterisk und Digium Certified Asterisk ausnutzen, um beliebigen Programmcode auszuführen, einen Denial of Service Zustand herbeizuführen oder Informationen offenzulegen.

Product

Asterisk ist eine komplette Open Source Multiprotokoll Telefonanlage (PBX) auf Softwarebasis.
Certified Asterisk ist eine komplette Multiprotokoll Telefonanlage (PBX) auf Softwarebasis mit erweitertem Support.

Vulnerabilities 3

  • Critical 9.1
    CVE-2022-21723

    Out-of-bounds read in multipart parsing in PJSIP

    PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In versions 2.11.1 and prior, parsing an incoming SIP message that contains a malformed mu…

    pjsip pjproject asterisk pjproject Debian Ubuntu Alpine
  • High 8.1
    CVE-2022-23608

    Use after free in PJSIP

    PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In versions up to and including 2.11.1 when in a dialog set (or forking) scenario, a hash …

    pjsip pjproject asterisk asterisk Debian Ubuntu Alpine
  • High 7.3
    CVE-2021-37706

    Potential integer underflow upon receiving STUN message in PJSIP

    PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In affected versions if the incoming STUN message contains an ERROR-CODE attribute, the he…

    pjsip pjproject asterisk pjproject Debian Ubuntu Alpine

Revision history

  1. #4

    Neue Updates von Ubuntu aufgenommen

  2. #3

    Neue Updates von Debian aufgenommen

  3. #2

    Neue Updates von Debian aufgenommen

  4. #1

    Initiale Fassung

References