Asterisk: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen

Summary

Product

Vulnerabilities 1

• Medium 5.8
  CVE-2024-35190

  Asterisk' res_pjsip_endpoint_identifier_ip: wrongly matches ALL unauthorized SIP requests

  Asterisk is an open source private branch exchange and telephony toolkit. After upgrade to 18.23.0, ALL unauthorized SIP requests are identified as PJSIP Endpoint of local asterisk server. This vulnerability is fixed in 18.23.1, 20.8.1, and 21.3.1.

  asterisk asterisk asterisk asterisk Ubuntu Alpine
  May 17, 2024

Revision history

1. 2026-04-12 #3

   Neue Updates von Fedora aufgenommen

2. 2024-06-04 #2

   Präzisierung betroffene Versionen

3. 2024-05-20 #1

   Initiale Fassung

References

• Asterisk Security Advisory vom 2024-05-20
  https://github.com/asterisk/asterisk/security/advisories/GHSA-qqxj-v78h-hrf9
• Red Hat Bugzilla – Bug 2281495
  https://bugzilla.redhat.com/show_bug.cgi?id=2281495
• Fedora Security Advisory FEDORA-EPEL-2026-D5CC2324A0 vom 2026-04-12
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-d5cc2324a0
• Fedora Security Advisory FEDORA-2026-80B21DEBE7 vom 2026-04-12
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-80b21debe7
• Fedora Security Advisory FEDORA-2026-98DECBDE87 vom 2026-04-12
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-98decbde87
• Fedora Security Advisory FEDORA-2026-38D71393C1 vom 2026-04-12
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-38d71393c1
• Fedora Security Advisory FEDORA-EPEL-2026-F2281ACB03 vom 2026-04-12
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-f2281acb03