Digium · Asterisk · CVE-2019-12827
**Name of the Vulnerable Software and Affected Versions**
Digium Asterisk versions 13.21-cert3 through 16.4.0
Digium Asterisk versions prior to 13.21-cert3
Digium Asterisk versions prior to 15.7.2
However, considering the ranges and versions provided, the most concise form is:
Digium Asterisk versions prior to 16.4.0
**Description**
A buffer overflow issue exists in the res pjsip messaging component, allowing remote authenticated users to crash Asterisk by sending a specially crafted SIP MESSAGE message.
**Recommendations**
For Digium Asterisk versions prior to 16.4.0, update to a version that contains a fix for this issue.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.