Denial Of Service

🗓️ 23 Dec 2023 22:40:03Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 33 Views

Asterisk: sid vulnerable to denial of service due to a race condition in DTLS protocol

Reporter	Title	Published	Views	Family All 51
AlpineLinux	CVE-2023-49786	14 Dec 202319:47	–	alpinelinux
Circl	CVE-2023-49786	20 Dec 202311:00	–	circl
CNNVD	Asterisk Security Vulnerabilities	14 Dec 202300:00	–	cnnvd
CVE	CVE-2023-49786	14 Dec 202319:47	–	cve
Cvelist	CVE-2023-49786 Asterisk susceptible to Denial of Service via DTLS Hello packets during call initiation	14 Dec 202319:47	–	cvelist
Debian	[SECURITY] [DLA 3696-1] asterisk security update	28 Dec 202323:01	–	debian
Debian	[SECURITY] [DSA 5596-1] asterisk security update	4 Jan 202421:21	–	debian
Debian CVE	CVE-2023-49786	14 Dec 202319:47	–	debiancve
Tenable Nessus	Debian dla-3696 : asterisk - security update	22 Jan 202500:00	–	nessus
Tenable Nessus	Fedora 44 : asterisk (2026-38d71393c1)	30 Apr 202600:00	–	nessus

Vulners

Node

asterisk asteriskMatch1:16.15.0~dfsg-1debian

AND

debian debian_linuxMatch999

asterisk asteriskMatch1:16.2.1~dfsg-1+deb10u2debian

AND

debian debian_linuxMatch10

asterisk asteriskMatch1:16.16.1~dfsg-1debian

AND

debian debian_linuxMatch11

asterisk asteriskMatch18.15.1-r1os

AND

asterisk asteriskMatch18.15.1-r2os

AND

alpinelinux alpine_linuxMatch3.18

asterisk asteriskMatch20.5.0-r0os

AND

alpinelinux alpine_linuxMatch3.19

asterisk asteriskMatch18.11.2-r0os

AND

asterisk asteriskMatch18.2.2-r5os

AND

asterisk asteriskMatch18.13.0-r0os

AND

alpinelinux alpine_linuxMatch3.16

asterisk asteriskMatch20.4.0-r0os

AND

asterisk asteriskMatch18.2.2-r4os

AND

asterisk asteriskMatch18.2.2-r1os

AND

asterisk asteriskMatch18.2.2-r3os

AND

asterisk asteriskMatch18.11.2-r0os

AND

asterisk asteriskMatch18.2.2-r2os

AND

asterisk asteriskMatch18.2.1-r1os

AND

asterisk asteriskMatch18.13.0-r1os

AND

asterisk asteriskMatch16.7.0-r0os

AND

asterisk asteriskMatch18.15.0-r3os

AND

asterisk asteriskMatch18.15.1-r0os

AND

asterisk asteriskMatch20.5.0-r0os

AND

asterisk asteriskMatch18.15.0-r2os

AND

asterisk asteriskMatch18.2.2-r5os

AND

asterisk asteriskMatch18.15.1-r2os

AND

asterisk asteriskMatch18.2.2-r0os

AND

asterisk asteriskMatch18.2.1-r0os

AND

asterisk asteriskMatch18.13.0-r0os

AND

asterisk asteriskMatch18.15.1-r1os

AND

asterisk asteriskMatch18.15.0-r0os

AND

alpinelinux alpine_linuxMatchedge

asterisk asteriskMatch18.13.0-r1os

AND

asterisk asteriskMatch18.15.0-r0os

AND

asterisk asteriskMatch18.15.1-r0os

AND

alpinelinux alpine_linuxMatch3.17

Source	Link
security-tracker	www.security-tracker.debian.org/tracker/CVE-2023-49786
packetstormsecurity	www.packetstormsecurity.com/files/176251/Asterisk-20.1.0-Denial-Of-Service.html
seclists	www.seclists.org/fulldisclosure/2023/Dec/24
github	www.github.com/asterisk/asterisk/commit/d7d7764cb07c8a1872804321302ef93bf62cba05
github	www.github.com/asterisk/asterisk/security/advisories/GHSA-hxj9-xwr8-w8pq
github	www.github.com/EnableSecurity/advisories/tree/master/ES2023-01-asterisk-dtls-hello-race
lists	www.lists.debian.org/debian-lts-announce/2023/12/msg00019.html
openwall	www.openwall.com/lists/oss-security/2023/12/15/7

09 Jan 2024 10:25Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.15.9 - 7.5

EPSS0.00077

SSVC