Asterisk · Asterisk · CVE-2025-54995
**Name of the Vulnerable Software and Affected Versions**
Asterisk versions prior to 18.26.4
Asterisk versions prior to 18.9-cert17
**Description**
Asterisk, an open source private branch exchange and telephony toolkit, is susceptible to resource exhaustion due to a lack of session termination. This can lead to leaks of RTP UDP ports and internal resources.
**Recommendations**
Update Asterisk to version 18.26.4 or later.
Update Asterisk to version 18.9-cert17 or later.