CVE-2024-35190

2024-05-1717:15:07

Google

osv.dev

asterisk telephony sip

5.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.1%

JSON

Asterisk is an open source private branch exchange and telephony toolkit. After upgrade to 18.23.0, ALL unauthorized SIP requests are identified as PJSIP Endpoint of local asterisk server. This vulnerability is fixed in 18.23.1, 20.8.1, and 21.3.1.

CPENameOperatorVersion
asteriskeq10.1.2-r1
asteriskeq11.2.2-r0
asteriskeq14.0.2-r0
asteriskeq12.4.0-r1
asteriskeq10.6.1-r0
asteriskeq11.5.0-r1
asteriskeq1.6.0.14-r1
asteriskeq1.8.3-r0
asteriskeq10.2.0-r0
asteriskeq11.1.0-r0

Name	Operator	Version
asterisk	eq	10.1.2-r1
asterisk	eq	11.2.2-r0
asterisk	eq	14.0.2-r0
asterisk	eq	12.4.0-r1
asterisk	eq	10.6.1-r0
asterisk	eq	11.5.0-r1
asterisk	eq	1.6.0.14-r1
asterisk	eq	1.8.3-r0
asterisk	eq	10.2.0-r0
asterisk	eq	11.1.0-r0