Summary
Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Asterisk ausnutzen, um einen Denial of Service Angriff durchzuführen.
Product
Asterisk ist eine komplette Open Source Multiprotokoll Telefonanlage (PBX) auf Softwarebasis.
Vulnerabilities 1
-
Medium 5.7
A malformed Contact or Record-Route URI in an incoming SIP request can cause Asterisk to crash when res_resolver_unbound is used
Asterisk is an open-source private branch exchange (PBX). Prior to versions 18.24.3, 20.9.3, and 21.4.3 of Asterisk and versions 18.9-cert12 and 20.7-cert2 of certified-asterisk, if Asterisk attempts to send a SIP request to a URI whose host portion starts wi…
Revision history
-
#3
Neue Updates von Fedora aufgenommen
-
#2
Neue Updates von Debian aufgenommen
-
#1
Initiale Fassung
References
-
Asterisk GitHub vom 2024-09-05
https://github.com/asterisk/asterisk/security/advisories/GHSA-v428-g3cw-7hv9
-
Red Hat Bugzilla vom 2024-09-05
https://bugzilla.redhat.com/show_bug.cgi?id=2310279
-
Debian Security Advisory DLA-3925 vom 2024-10-20
https://lists.debian.org/debian-lts-announce/2024/10/msg00016.html
-
Fedora Security Advisory FEDORA-EPEL-2026-F2281ACB03 vom 2026-04-12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-f2281acb03
-
Fedora Security Advisory FEDORA-2026-38D71393C1 vom 2026-04-12
https://bodhi.fedoraproject.org/updates/FEDORA-2026-38d71393c1
-
Fedora Security Advisory FEDORA-2026-80B21DEBE7 vom 2026-04-12
https://bodhi.fedoraproject.org/updates/FEDORA-2026-80b21debe7
-
Fedora Security Advisory FEDORA-EPEL-2026-D5CC2324A0 vom 2026-04-12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-d5cc2324a0
-
Fedora Security Advisory FEDORA-2026-98DECBDE87 vom 2026-04-12
https://bodhi.fedoraproject.org/updates/FEDORA-2026-98decbde87