PT-2019-13165 · Sangoma+1 · Asterisk+1
Fcastellano
+1
·
Publicado
2019-07-12
·
Atualizado
2022-06-01
·
CVE-2019-13161
CVSS v3.1
5.3
Média
| Vetor | AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Asterisk Open Source versions 13.27.0 and earlier, 14.x, 15.x through 15.7.2, and 16.x through 16.4.0
Certified Asterisk version 13.21-cert3
Description
An issue allows an attacker to crash Asterisk when handling an SDP answer to an outgoing T.38 re-invite. To exploit this, an attacker must cause the chan sip module to send a T.38 re-invite request to them. Upon receipt, the attacker must send an SDP answer containing both a T.38 UDPTL stream and another media stream containing only a codec, which is not permitted according to the chan sip configuration.
Recommendations
For Asterisk Open Source versions 13.27.0 and earlier, 14.x, 15.x through 15.7.2, and 16.x through 16.4.0, update to a version that contains a fix for this issue.
For Certified Asterisk version 13.21-cert3, update to a version that contains a fix for this issue.
As a temporary workaround, consider disabling the chan sip module until a patch is available.
Restrict access to the T.38 re-invite request to minimize the risk of exploitation.
Avoid using the SDP answer containing both a T.38 UDPTL stream and another media stream containing only a codec in the affected chan sip configuration until the issue is resolved.
Correção
NULL Pointer Dereference
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Asterisk