Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Sotiris Ganouris

#40791of 53,633
6.5Total CVSS
Vulnerabilities · 1
PT-2019-18481
6.5
2019-03-28
Sangoma · Asterisk · CVE-2019-7251
**Name of the Vulnerable Software and Affected Versions** Asterisk versions 15.7.1 and earlier Asterisk versions 16.1.1 and earlier **Description** The issue is related to an Integer Signedness problem in the `res pjsip sdp rtp` module, which can be exploited by remote authenticated users. This can be done by sending a specially crafted SDP protocol violation, leading to a crash of Asterisk. **Recommendations** For Asterisk versions 15.7.1 and earlier, update to a version later than 15.7.1 to resolve the issue. For Asterisk versions 16.1.1 and earlier, update to a version later than 16.1.1 to resolve the issue.