Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Asterisk ausnutzen, um einen Denial of Service Angriff durchzuführen.
Product
Asterisk ist eine komplette Open Source Multiprotokoll Telefonanlage (PBX) auf Softwarebasis.
Vulnerabilities 5
-
Unscored —
A buffer overflow in res_pjsip_diversion.c in Sangoma Asterisk versions 13.38.1, 16.15.1, 17.9.1, and 18.1.1 allows rem…
-
Unscored —
Incorrect access controls in res_srtp.c in Sangoma Asterisk 13.38.1, 16.16.0, 17.9.1, and 18.2.0 and Certified Asterisk…
-
Unscored —CVE-2021-26714 Public exploit
The Enterprise License Manager portal in Mitel MiContact Center Enterprise before 9.4 could allow a user to access rest…
-
Unscored —
An issue was discovered in Sangoma Asterisk 16.x before 16.16.1, 17.x before 17.9.2, and 18.x before 18.2.1 and Certifi…
-
Unscored —
An issue was discovered in res_pjsip_session.c in Digium Asterisk through 13.38.1; 14.x, 15.x, and 16.x through 16.16.0…
Revision history
-
#2
Neue Updates von Gentoo aufgenommen
-
#1
Initiale Fassung
References
-
Asterisk Project Security Advisory - AST-2021-001 vom 2021-02-18
https://downloads.asterisk.org/pub/security/AST-2021-001.html
-
Asterisk Project Security Advisory - AST-2021-002 vom 2021-02-18
https://downloads.asterisk.org/pub/security/AST-2021-002.html
-
Asterisk Project Security Advisory - AST-2021-003 vom 2021-02-18
https://downloads.asterisk.org/pub/security/AST-2021-003.html
-
Asterisk Project Security Advisory - AST-2021-004 vom 2021-02-18
https://downloads.asterisk.org/pub/security/AST-2021-004.html
-
Asterisk Project Security Advisory - AST-2021-005 vom 2021-02-18
https://downloads.asterisk.org/pub/security/AST-2021-005.html
-
Gentoo Linux Security Advisory GLSA-202412-03 vom 2024-12-07
https://security.gentoo.org/glsa/202412-03