Lucene search
HistoryDec 05, 2022 - 9:15 p.m.
CVE-2022-37325
sangoma
asterisk
setup message
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.003 Low
EPSS
Percentile
65.2%
In Sangoma Asterisk through 16.28.0, 17.x and 18.x through 18.14.0, and 19.x through 19.6.0, an incoming Setup message to addons/ooh323c/src/ooq931.c with a malformed Calling or Called Party IE can cause a crash.
Affected configurations
Node
sangomaasteriskRange16.0.0–16.29.1
ORsangomaasteriskRange18.0.0–18.15.1
ORsangomaasteriskRange19.0.0–19.7.1
ORsangomaasteriskMatch20.0.0
Related
veracode
veracode
Denial Of Service (DoS)
2022-12-13 12:22:58
ubuntucve
ubuntucve
CVE-2022-37325
2022-12-05 00:00:00
alpinelinux
alpinelinux
CVE-2022-37325
2022-12-05 21:15:10
cvelist
cvelist
CVE-2022-37325
2022-12-05 00:00:00
debiancve
debiancve
CVE-2022-37325
2022-12-05 21:15:10
cve
cve
CVE-2022-37325
2022-12-05 21:15:10
prion
prion
Code injection
2022-12-05 21:15:00
osv
osv
CVE-2022-37325
2022-12-05 21:15:10
asterisk - security update
2023-02-23 00:00:00
asterisk - security update
2023-02-22 00:00:00
freebsd
freebsd
Asterisk -- multiple vulnerabilities
2022-12-01 00:00:00
openvas
openvas
Asterisk Multiple Vulnerabilities (AST-2022-007, AST-2022-008, AST-2022-009)
2022-12-02 00:00:00
Debian: Security Advisory (DSA-5358-1)
2023-02-24 00:00:00
Debian: Security Advisory (DLA-3335-1)
2023-02-23 00:00:00
nessus
nessus
FreeBSD : Asterisk -- multiple vulnerabilities (8dd438ed-a338-11ed-b48b-589cfc0f81b0)
2023-02-02 00:00:00
Debian DSA-5358-1 : asterisk - security update
2023-02-24 00:00:00
Debian DLA-3335-1 : asterisk - LTS security update
2023-02-24 00:00:00
debian
debian
[SECURITY] [DLA 3335-1] asterisk security update
2023-02-22 22:36:41
[SECURITY] [DSA 5358-1] asterisk security update
2023-02-23 09:14:43
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.003 Low
EPSS
Percentile
65.2%
Related for NVD:CVE-2022-37325