PT-2019-14311 · Sangoma+1 · Asterisk+1

Gregory Massel · Publicado 2019-09-09 · Atualizado 2020-07-06 · CVE-2019-15639

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Asterisk versions 13.28.0 and 16.5.0

Description The issue allows a remote attacker to send a specific RTP packet during a call and cause a crash in a specific scenario. This occurs due to a problem in the main/translate.c file of the affected software.

Recommendations For Asterisk version 13.28.0, update to a version that fixes this issue. For Asterisk version 16.5.0, update to a version that fixes this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

ALT-PU-2020-2313

CVE-2019-15639

Produtos afetados

Alt Linux

Asterisk

Referências · 23

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15639 · Nota de Segurança
• https://bdu.fstec.ru/vul/2022-01086 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15297 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-37706 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37325 · Nota de Segurança
• https://packages.altlinux.org/ru/vuln/CVE-2019-15639 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18790 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23608 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42705 · Nota de Segurança
• https://security.alpinelinux.org/vuln/CVE-2019-15639 · Nota
• https://osv.dev/vulnerability/ALPINE-CVE-2019-15639 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-15639 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18610 · Nota de Segurança
• http://downloads.asterisk.org/pub/security/AST-2019-005.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-15639 · Nota de Segurança