PT-2023-7750 · Sangoma+2 · Asterisk+3

Mbradeen · Published 2023-07-06 · Updated 2025-02-13 · CVE-2023-37457

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Asterisk versions 18.20.0 and prior Asterisk versions 20.5.0 and prior Asterisk version 21.0.0 certified-asterisk versions 18.9-cert5 and prior

Description The issue is related to the PJSIP HEADER dialplan function in Asterisk, where the 'update' functionality can exceed the available buffer space for storing the new value of a header, potentially overwriting memory or causing a crash. This is not externally exploitable unless the dialplan is explicitly written to update a header based on data from an outside source. If the 'update' functionality is not used, the issue does not occur.

Recommendations For Asterisk versions 18.20.0 and prior, update to a version that includes the patch available at commit a1ca0268254374b515fa5992f01340f7717113fa. For Asterisk versions 20.5.0 and prior, update to a version that includes the patch available at commit a1ca0268254374b515fa5992f01340f7717113fa. For Asterisk version 21.0.0, update to a version that includes the patch available at commit a1ca0268254374b515fa5992f01340f7717113fa. For certified-asterisk versions 18.9-cert5 and prior, update to a version that includes the patch available at commit a1ca0268254374b515fa5992f01340f7717113fa. As a temporary workaround, consider disabling the PJSIP HEADER function's 'update' functionality until a patch is available.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

ALT-PU-2025-2613

BDU:2023-08817

CVE-2023-37457

DLA-3696-1

DSA-5596-1

GHSA-98RC-4J27-74HH

Affected Products

Alt Linux

Asterisk

Red Os

Certified Asterisk

References · 23

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/37xxx/CVE-2023-37457.json · Exploit
• https://github.com/asterisk/asterisk/commit/a1ca0268254374b515fa5992f01340f7717113fa · Patch
• https://github.com/asterisk/asterisk/security/advisories/GHSA-98rc-4j27-74hh · Vendor Advisory
• https://osv.dev/vulnerability/DLA-3696-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-37457 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-5596-1 · Vendor Advisory
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2023-37457 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-37457 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-08817 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-37457 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-37457 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-37457 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-37457 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-37457 · Vendor Advisory