Lucene search

K
freebsdFreeBSD2A3BC6AC-E7C6-11E7-A90B-001999F8D30B
HistoryDec 12, 2017 - 12:00 a.m.

asterisk -- Crash in PJSIP resource when missing a contact header

2017-12-1200:00:00
vuxml.freebsd.org
10

0.929 High

EPSS

Percentile

99.0%

The Asterisk project reports:

A select set of SIP messages create a dialog in Asterisk.
Those SIP messages must contain a contact header. For
those messages, if the header was not present and using
the PJSIP channel driver, it would cause Asterisk to
crash. The severity of this vulnerability is somewhat
mitigated if authentication is enabled. If authentication
is enabled a user would have to first be authorized before
reaching the crash point.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchasterisk13< 13.18.5UNKNOWN

0.929 High

EPSS

Percentile

99.0%

Related for 2A3BC6AC-E7C6-11E7-A90B-001999F8D30B