CVE-2023-49786

creationtimestamp| type| source ---|---|--- 2023-12-20 11:00:39+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/9620 2023-12-27 21:16:45+00:00| seen| https://t.me/ctinow/159782 2024-08-16 08:57:35+00:00| published-proof-of-concept| https://t.me/Rootsec2/2301...

Asterisk Multiple Vulnerabilities (Dec 2023)

Asterisk is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:digium:asterisk"; if description...

CVE-2023-49786

Asterisk is affected by CVE-2023-49786 due to a race condition in the DTLS handshake during DTLS-SRTP media setup. The vulnerability is triggered in affected releases prior to 18.20.1, 20.5.1, 21.0.1 and the certified-asterisk 18.9-cert6. The issue allows continuous DoS by denying new DTLS-SRTP e...