Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
debianDebianDEBIAN:DLA-2017-1:61417
HistoryNov 30, 2019 - 8:56 p.m.

[SECURITY] [DLA 2017-1] asterisk security update

2019-11-3020:56:56
lists.debian.org
89

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.006 Low

EPSS

Percentile

78.8%

JSON

Package : asterisk
Version : 1:11.13.1~dfsg-2+deb8u7
CVE ID : CVE-2019-13161 CVE-2019-18610 CVE-2019-18790

Several vulnerabilites are fixed in Asterisk,
an Open Source PBX and telephony toolkit.

CVE-2019-13161
An attacker was able to crash Asterisk when handling an SDP answer to an
outgoing T.38 re-invite.

CVE-2019-18610
Remote authenticated Asterisk Manager Interface (AMI) users without
system authorization could execute arbitrary system commands.

CVE-2019-18790
A SIP call hijacking vulnerability.

For Debian 8 "Jessie", these problems have been fixed in version
1:11.13.1~dfsg-2+deb8u7.

We recommend that you upgrade your asterisk packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

OSVersionArchitecturePackageVersionFilename
Debian10mipsasterisk-mysql-dbgsym< 1:16.2.1~dfsg-1+deb10u2asterisk-mysql-dbgsym_1:16.2.1~dfsg-1+deb10u2_mips.deb
Debian9i386asterisk-voicemail-imapstorage< 1:13.14.1~dfsg-2+deb9u6asterisk-voicemail-imapstorage_1:13.14.1~dfsg-2+deb9u6_i386.deb
Debian10armhfasterisk-tests-dbgsym< 1:16.2.1~dfsg-1+deb10u2asterisk-tests-dbgsym_1:16.2.1~dfsg-1+deb10u2_armhf.deb
Debian10mipselasterisk-dbgsym< 1:16.2.1~dfsg-1+deb10u2asterisk-dbgsym_1:16.2.1~dfsg-1+deb10u2_mipsel.deb
Debian10armelasterisk-voicemail-dbgsym< 1:16.2.1~dfsg-1+deb10u2asterisk-voicemail-dbgsym_1:16.2.1~dfsg-1+deb10u2_armel.deb
Debian10mipselasterisk-modules-dbgsym< 1:16.2.1~dfsg-1+deb10u2asterisk-modules-dbgsym_1:16.2.1~dfsg-1+deb10u2_mipsel.deb
Debian9armhfasterisk-voicemail< 1:13.14.1~dfsg-2+deb9u6asterisk-voicemail_1:13.14.1~dfsg-2+deb9u6_armhf.deb
Debian9armhfasterisk-voicemail-odbcstorage< 1:13.14.1~dfsg-2+deb9u6asterisk-voicemail-odbcstorage_1:13.14.1~dfsg-2+deb9u6_armhf.deb
Debian9arm64asterisk-voicemail-odbcstorage< 1:13.14.1~dfsg-2+deb9u6asterisk-voicemail-odbcstorage_1:13.14.1~dfsg-2+deb9u6_arm64.deb
Debian10i386asterisk-mp3< 1:16.2.1~dfsg-1+deb10u2asterisk-mp3_1:16.2.1~dfsg-1+deb10u2_i386.deb
Rows per page:
1-10 of 3551

Related

openvas 4
osv 5
debian 2
nessus 5
symantec 2
ubuntucve 3
cve 4
prion 3
checkpoint_advisories 1
veracode 3
freebsd 3
alpinelinux 3
debiancve 3
redhatcve 1
openvas
openvas
Debian: Security Advisory (DLA-2017-1)
2019-12-01 00:00:00
Asterisk Multiple Vulnerabilities (AST-2019-006, AST-2019-007)
2019-11-22 00:00:00
Debian: Security Advisory (DLA-2969-1)
2022-04-04 00:00:00
osv
osv
asterisk - security update
2019-11-30 00:00:00
asterisk - security update
2022-04-03 00:00:00
CVE-2019-13161
2019-07-12 20:15:11
debian
debian
[SECURITY] [DLA 2969-1] asterisk security update
2022-04-03 05:56:53
[SECURITY] [DLA 2017-2] asterisk regression update
2019-12-01 14:13:24
nessus
nessus
Debian DLA-2969-1 : asterisk - LTS security update
2022-04-03 00:00:00
FreeBSD : asterisk -- AMI user could execute system commands (49b61ab6-0d04-11ea-87ca-001999f8d30b)
2019-11-25 00:00:00
Debian DLA-2017-2 : asterisk regression update
2019-12-03 00:00:00
symantec
symantec
Asterisk Manager Interface CVE-2019-18610 Arbitrary Command Execution Vulnerability
2019-11-21 00:00:00
Multiple Asterisk Products CVE-2019-18790 Authorization Bypass Vulnerability
2019-11-21 00:00:00
ubuntucve
ubuntucve
CVE-2019-18610
2019-11-22 00:00:00
CVE-2019-18790
2019-11-22 00:00:00
CVE-2019-13161
2019-07-12 00:00:00
cve
cve
CVE-2019-13161
2019-07-12 20:15:00
CVE-2019-18610
2019-11-22 18:15:00
CVE-2019-18790
2019-11-22 17:15:00
prion
prion
Authentication flaw
2019-11-22 17:15:00
Design/Logic Flaw
2019-11-22 18:15:00
Null pointer dereference
2019-07-12 20:15:00
checkpoint_advisories
checkpoint_advisories
Sangoma Asterisk Command Injection (CVE-2019-18610)
2020-04-16 00:00:00
veracode
veracode
Access Restriction Bypass
2022-04-05 09:52:36
Access Restriction Bypass
2022-04-05 08:10:17
Denial Of Service (DoS)
2022-04-06 10:03:07
freebsd
freebsd
asterisk -- SIP request can change address of a SIP peer
2019-10-17 00:00:00
asterisk -- Remote Crash Vulnerability in chan_sip channel driver
2019-06-28 00:00:00
asterisk -- AMI user could execute system commands
2019-10-10 00:00:00
alpinelinux
alpinelinux
CVE-2019-18790
2019-11-22 17:15:00
CVE-2019-18610
2019-11-22 18:15:00
CVE-2019-13161
2019-07-12 20:15:00
debiancve
debiancve
CVE-2019-13161
2019-07-12 20:15:00
CVE-2019-18610
2019-11-22 18:15:00
CVE-2019-18790
2019-11-22 17:15:00
redhatcve
redhatcve
CVE-2019-18351
2022-05-20 22:45:58

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.006 Low

EPSS

Percentile

78.8%

JSON
Related for DEBIAN:DLA-2017-1:61417
openvas4osv5debian2nessus5symantec2ubuntucve3cve4prion3checkpoint_advisories1veracode3freebsd3alpinelinux3debiancve3redhatcve1