CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

asterisk is vulnerable to denial of service DoS attacks. A null pointer dereference in chansip while handling SDP negotiation allows an attacker to crash the system when handling an SDP answer to an outgoing T.38 re-invite...

5.3CVSS4.1AI score0.02307EPSS

Exploits0References5Affected Software1

Cvelist•added 2021/03/10 10:30 p.m.•15 views

CVE-2021-21375 Crash in receiving updated SDP answer after initial SDP negotiation failed

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In PJSIP version 2.10 and earlier, after an initial INVITE has been sent, when two 183 responses are received, with the first on...

6.5CVSS6.5AI score0.01095EPSS

Exploits1References5

Veracode•added 2021/02/24 3:27 a.m.•21 views

Denial Of Service (DoS)

asterisk:sid is vulnerable to denial of service. The vulnerability exists in respjsipsession.c in Digium Asterisk where SDP negotiation in PJSIP allows a remote server to potentially crash Asterisk by sending specific SIP responses that cause an SDP negotiation failure...

5.9CVSS5.6AI score0.00811EPSS

Exploits0References6Affected Software1

NVD•added 2021/02/18 8:15 p.m.•12 views

CVE-2021-26906

An issue was discovered in respjsipsession.c in Digium Asterisk through 13.38.1; 14.x, 15.x, and 16.x through 16.16.0; 17.x through 17.9.1; and 18.x through 18.2.0, and Certified Asterisk through 16.8-cert5. An SDP negotiation vulnerability in PJSIP allows a remote server to potentially crash...

5.9CVSS0.00811EPSS

Exploits0References5

OSV•added 2021/02/18 8:15 p.m.•15 views

CVE-2021-26906

5.9CVSS6.7AI score

Exploits0References5

Prion•added 2021/02/18 8:15 p.m.•19 views

Design/Logic Flaw

4.3CVSS5.6AI score0.00811EPSS

Exploits0References5Affected Software2

UbuntuCve•added 2021/02/18 8:15 p.m.•20 views

CVE-2021-26906

5.9CVSS6.3AI score0.00811EPSS

Exploits0References6

CVE•added 2021/02/18 7:50 p.m.•135 views

CVE-2021-26906

The CVE-2021-26906 entry describes an SDP negotiation vulnerability in PJSIP within Digium Asterisk (and Certified Asterisk) up to specific older branches, allowing a remote server to potentially crash Asterisk by sending SIP responses that trigger an SDP negotiation failure. Affected products in...

5.9CVSS5.5AI score0.00811EPSS

Exploits0References5Affected Software2

Cvelist•added 2021/02/18 7:50 p.m.•16 views

CVE-2021-26906

5.9AI score0.00811EPSS

Exploits0References5

Debian CVE•added 2021/02/18 7:50 p.m.•20 views

CVE-2021-26906

5.9CVSS6AI score0.00811EPSS

Exploits0

NVD•added 2019/07/12 8:15 p.m.•13 views

CVE-2019-13161

An issue was discovered in Asterisk Open Source through 13.27.0, 14.x and 15.x through 15.7.2, and 16.x through 16.4.0, and Certified Asterisk through 13.21-cert3. A pointer dereference in chansip while handling SDP negotiation allows an attacker to crash Asterisk when handling an SDP answer to a...

5.3CVSS5.1AI score0.02307EPSS

Exploits0References4

OSV•added 2019/07/12 8:15 p.m.•1 views

ALPINE-CVE-2019-13161

5.3CVSS6.9AI score0.02307EPSS

Exploits0References1

OSV•added 2019/07/12 8:15 p.m.•21 views

CVE-2019-13161

5.3CVSS6.4AI score

Exploits0References4

UbuntuCve•added 2019/07/12 8:15 p.m.•23 views

CVE-2019-13161