Skip to content
OpenAdvisories
Medium WID-SEC-2025-1926 2 CVEs

Asterisk: Mehrere Schwachstellen ermöglichen Denial of Service

Published Aug 28, 2025 · Updated Apr 12, 2026 · Revision 4 · de-DE

Vendor: Debian Vendor: Fedora Vendor: gentoo Product: Linux Product: Linux Product: Linux Platform: Linux

Summary

Ein Angreifer kann mehrere Schwachstellen in Asterisk ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

Asterisk ist eine komplette Open Source Multiprotokoll Telefonanlage (PBX) auf Softwarebasis.

Vulnerabilities 2

  • High 7.5
    CVE-2025-57767

    Asterisk can crash from a specifically malformed Authorization header in an incoming SIP request

    Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.15.2, 21.10.2, and 22.5.2, if a SIP request is received with an Authorization header that contains a realm that wasn't in a previous 401 response's WWW-Authenticate…

    asterisk asterisk asterisk asterisk Debian Ubuntu
  • Medium 6.5
    CVE-2025-54995

    Asterisk remotely exploitable leak of RTP UDP ports and internal resources

    Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 18.26.4 and 18.9-cert17, RTP UDP ports and internal resources can leak due to a lack of session termination. This could result in leaks and resource exhaustion. This i…

    asterisk asterisk asterisk asterisk Debian Ubuntu

Revision history

  1. #4

    Neue Updates von Fedora aufgenommen

  2. #3

    Neue Updates von Gentoo aufgenommen

  3. #2

    Neue Updates von Debian aufgenommen

  4. #1

    Initiale Fassung

References