CVE-2021-31878

An issue was discovered in PJSIP in Asterisk before 16.19.1 and before 18.5.1. To exploit, a re-INVITE without SDP must be received after Asterisk has sent a BYE request...

CVE-2021-31878

Affected software. Asterisk prior to 16.19.1 and prior to 18.5.1 uses the PJSIP stack. Vulnerability and root cause. An issue exists in PJSIP where a re-INVITE without SDP, received after Asterisk has sent a BYE, can be exploited. This is the explicit condition described in CVE-2021-31878. Impact...

CVE-2021-31878

An issue was discovered in PJSIP in Asterisk before 16.19.1 and before 18.5.1. To exploit, a re-INVITE without SDP must be received after Asterisk has sent a BYE request...

FreeBSD : asterisk -- Remote Crash Vulnerability in PJSIP channel driver (ffa364e1-ebf5-11eb-aef1-0897988a1c07)

The Asterisk project reports : When Asterisk receives a re-INVITE without SDP after having sent a BYE request a crash will occur. This occurs due to the Asterisk channel no longer being present while code assumes it is. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...