FreeBSD5D8EF725-7228-11EB-8386-001999F8D30Basterisk -- Remote attacker could prematurely tear down SRTP calls
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.015 Low
EPSS
Percentile
87.1%
The Asterisk project reports:
An unauthenticated remote attacker could replay SRTP
packets which could cause an Asterisk instance configured
without strict RTP validation to tear down calls
prematurely.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| FreeBSD | any | noarch | asterisk13 | = 13.38.1 | UNKNOWN |
| FreeBSD | any | noarch | asterisk13 | < 13.38.2 | UNKNOWN |
| FreeBSD | any | noarch | asterisk16 | = 16.16.0 | UNKNOWN |
| FreeBSD | any | noarch | asterisk16 | < 16.16.1 | UNKNOWN |
| FreeBSD | any | noarch | asterisk18 | = 18.2.0 | UNKNOWN |
| FreeBSD | any | noarch | asterisk18 | < 18.2.1 | UNKNOWN |
Related
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.015 Low
EPSS
Percentile
87.1%