EUVD-2021-18753

Malware in sbrugna...

Cross site request forgery (csrf)

An issue was discovered in PJSIP in Asterisk before 16.19.1 and before 18.5.1. To exploit, a re-INVITE without SDP must be received after Asterisk has sent a BYE request...

CVE-2021-31878

An issue was discovered in PJSIP in Asterisk before 16.19.1 and before 18.5.1. To exploit, a re-INVITE without SDP must be received after Asterisk has sent a BYE request...

CVE-2021-31878: Reachable Assertion

An issue was discovered in PJSIP in Asterisk before 16.19.1 and before 18.5.1. To exploit, a re-INVITE without SDP must be received after Asterisk has sent a BYE request...

PT-2021-6449

Name of the Vulnerable Software and Affected Versions Asterisk versions prior to 16.19.1 Asterisk versions prior to 18.5.1 Description The issue is related to the incorrect handling of a re-INVITE after a BYE request has been sent. This can be exploited by a remote attacker, allowing them to caus...