CVE-2019-13161
12.07.2019, 20:15
An issue was discovered in Asterisk Open Source through 13.27.0, 14.x and 15.x through 15.7.2, and 16.x through 16.4.0, and Certified Asterisk through 13.21-cert3. A pointer dereference in chan_sip while handling SDP negotiation allows an attacker to crash Asterisk when handling an SDP answer to an outgoing T.38 re-invite. To exploit this vulnerability an attacker must cause the chan_sip module to send a T.38 re-invite request to them. Upon receipt, the attacker must send an SDP answer containing both a T.38 UDPTL stream and another media stream containing only a codec (which is not permitted according to the chan_sip configuration).Enginsight
| Vendor | Product | Version |
|---|---|---|
| digium | certified_asterisk | 1.8.0.0 |
| digium | certified_asterisk | 1.8.0.0:beta1 |
| digium | certified_asterisk | 1.8.0.0:beta2 |
| digium | certified_asterisk | 1.8.0.0:beta3 |
| digium | certified_asterisk | 1.8.0.0:beta4 |
| digium | certified_asterisk | 1.8.0.0:beta5 |
| digium | certified_asterisk | 1.8.0.0:rc1 |
| digium | certified_asterisk | 1.8.0.0:rc2 |
| digium | certified_asterisk | 1.8.0.0:rc3 |
| digium | certified_asterisk | 1.8.0.0:rc4 |
| digium | certified_asterisk | 1.8.0.0:rc5 |
| digium | certified_asterisk | 1.8.1.0 |
| digium | certified_asterisk | 1.8.1.0:rc1 |
| digium | certified_asterisk | 1.8.2.0 |
| digium | certified_asterisk | 1.8.2.0:rc1 |
| digium | certified_asterisk | 1.8.3.0 |
| digium | certified_asterisk | 1.8.3.0:rc1 |
| digium | certified_asterisk | 1.8.3.0:rc2 |
| digium | certified_asterisk | 1.8.3.0:rc3 |
| digium | certified_asterisk | 1.8.4.0 |
| digium | certified_asterisk | 1.8.4.0:rc1 |
| digium | certified_asterisk | 1.8.4.0:rc2 |
| digium | certified_asterisk | 1.8.4.0:rc3 |
| digium | certified_asterisk | 1.8.5.0 |
| digium | certified_asterisk | 1.8.5.0:rc1 |
| digium | certified_asterisk | 1.8.6.0 |
| digium | certified_asterisk | 1.8.6.0:rc1 |
| digium | certified_asterisk | 1.8.6.0:rc2 |
| digium | certified_asterisk | 1.8.6.0:rc3 |
| digium | certified_asterisk | 1.8.7.0 |
| digium | certified_asterisk | 1.8.7.0:rc1 |
| digium | certified_asterisk | 1.8.7.0:rc2 |
| digium | certified_asterisk | 1.8.8.0 |
| digium | certified_asterisk | 1.8.8.0:rc1 |
| digium | certified_asterisk | 1.8.8.0:rc2 |
| digium | certified_asterisk | 1.8.8.0:rc3 |
| digium | certified_asterisk | 1.8.8.0:rc4 |
| digium | certified_asterisk | 1.8.8.0:rc5 |
| digium | certified_asterisk | 1.8.9.0 |
| digium | certified_asterisk | 1.8.9.0:rc1 |
| digium | certified_asterisk | 1.8.9.0:rc2 |
| digium | certified_asterisk | 1.8.9.0:rc3 |
| digium | certified_asterisk | 1.8.10.0 |
| digium | certified_asterisk | 1.8.10.0:rc1 |
| digium | certified_asterisk | 1.8.10.0:rc2 |
| digium | certified_asterisk | 1.8.10.0:rc3 |
| digium | certified_asterisk | 1.8.10.0:rc4 |
| digium | certified_asterisk | 1.8.11:cert |
| digium | certified_asterisk | 1.8.11:cert1 |
| digium | certified_asterisk | 1.8.11:cert10 |
| digium | certified_asterisk | 1.8.11:cert2 |
| digium | certified_asterisk | 1.8.11:cert3 |
| digium | certified_asterisk | 1.8.11:cert3-rc1 |
| digium | certified_asterisk | 1.8.11:cert3-rc2 |
| digium | certified_asterisk | 1.8.11:cert4 |
| digium | certified_asterisk | 1.8.11:cert5 |
| digium | certified_asterisk | 1.8.11:cert5-rc1 |
| digium | certified_asterisk | 1.8.11:cert5-rc2 |
| digium | certified_asterisk | 1.8.11:cert6 |
| digium | certified_asterisk | 1.8.11:cert7 |
| digium | certified_asterisk | 1.8.11:cert8 |
| digium | certified_asterisk | 1.8.11:cert9 |
| digium | certified_asterisk | 1.8.11:cert9-rc1 |
| digium | certified_asterisk | 1.8.11.0 |
| digium | certified_asterisk | 1.8.11.0:rc1 |
| digium | certified_asterisk | 1.8.11.0:rc2 |
| digium | certified_asterisk | 1.8.11.0:rc3 |
| digium | certified_asterisk | 1.8.12.0 |
| digium | certified_asterisk | 1.8.12.0:rc1 |
| digium | certified_asterisk | 1.8.12.0:rc2 |
| digium | certified_asterisk | 1.8.12.0:rc3 |
| digium | certified_asterisk | 1.8.13.0 |
| digium | certified_asterisk | 1.8.13.0:rc1 |
| digium | certified_asterisk | 1.8.13.0:rc2 |
| digium | certified_asterisk | 1.8.14.0:rc1 |
| digium | certified_asterisk | 1.8.14.0:rc2 |
| digium | certified_asterisk | 1.8.15 |
| digium | certified_asterisk | 1.8.15:cert1 |
| digium | certified_asterisk | 1.8.15:cert1-rc1 |
| digium | certified_asterisk | 1.8.15:cert1-rc2 |
| digium | certified_asterisk | 1.8.15:cert1-rc3 |
| digium | certified_asterisk | 1.8.15:cert1_rc1 |
| digium | certified_asterisk | 1.8.15:cert1_rc2 |
| digium | certified_asterisk | 1.8.15:cert1_rc3 |
| digium | certified_asterisk | 1.8.15:cert2 |
| digium | certified_asterisk | 1.8.15:cert3 |
| digium | certified_asterisk | 1.8.15:cert4 |
| digium | certified_asterisk | 1.8.15:cert5 |
| digium | certified_asterisk | 1.8.15:cert6 |
| digium | certified_asterisk | 1.8.15:cert7 |
| digium | certified_asterisk | 1.8.28 |
| digium | certified_asterisk | 1.8.28:cert1 |
| digium | certified_asterisk | 1.8.28:cert1-rc1 |
| digium | certified_asterisk | 1.8.28:cert2 |
| digium | certified_asterisk | 1.8.28:cert2 |
| digium | certified_asterisk | 1.8.28:cert3 |
| digium | certified_asterisk | 1.8.28:cert4 |
| digium | certified_asterisk | 1.8.28:cert5 |
| digium | certified_asterisk | 1.8.28.0 |
| digium | certified_asterisk | 11.0.0 |
| digium | certified_asterisk | 11.0.0:rc1 |
| digium | certified_asterisk | 11.0.0:rc2 |
| digium | certified_asterisk | 11.1.0 |
| digium | certified_asterisk | 11.1.0:rc1 |
| digium | certified_asterisk | 11.1.0:rc2 |
| digium | certified_asterisk | 11.1.0:rc3 |
| digium | certified_asterisk | 11.2:cert1 |
| digium | certified_asterisk | 11.2:cert1-rc2 |
| digium | certified_asterisk | 11.2:cert2 |
| digium | certified_asterisk | 11.2:cert3 |
| digium | certified_asterisk | 11.3.0 |
| digium | certified_asterisk | 11.3.0:rc1 |
| digium | certified_asterisk | 11.3.0:rc2 |
| digium | certified_asterisk | 11.4.0 |
| digium | certified_asterisk | 11.4.0:rc1 |
| digium | certified_asterisk | 11.4.0:rc2 |
| digium | certified_asterisk | 11.4.0:rc3 |
| digium | certified_asterisk | 11.5.0 |
| digium | certified_asterisk | 11.5.0:rc1 |
| digium | certified_asterisk | 11.5.0:rc2 |
| digium | certified_asterisk | 11.6:cert1 |
| digium | certified_asterisk | 11.6:cert1 |
| digium | certified_asterisk | 11.6:cert1-rc1 |
| digium | certified_asterisk | 11.6:cert1-rc2 |
| digium | certified_asterisk | 11.6:cert1_rc1 |
| digium | certified_asterisk | 11.6:cert1_rc2 |
| digium | certified_asterisk | 11.6:cert10 |
| digium | certified_asterisk | 11.6:cert11 |
| digium | certified_asterisk | 11.6:cert12 |
| digium | certified_asterisk | 11.6:cert12 |
| digium | certified_asterisk | 11.6:cert13 |
| digium | certified_asterisk | 11.6:cert13 |
| digium | certified_asterisk | 11.6:cert14 |
| digium | certified_asterisk | 11.6:cert14 |
| digium | certified_asterisk | 11.6:cert14-rc1 |
| digium | certified_asterisk | 11.6:cert14-rc2 |
| digium | certified_asterisk | 11.6:cert15 |
| digium | certified_asterisk | 11.6:cert15 |
| digium | certified_asterisk | 11.6:cert16 |
| digium | certified_asterisk | 11.6:cert17 |
| digium | certified_asterisk | 11.6:cert18 |
| digium | certified_asterisk | 11.6:cert2 |
| digium | certified_asterisk | 11.6:cert2 |
| digium | certified_asterisk | 11.6:cert3 |
| digium | certified_asterisk | 11.6:cert3 |
| digium | certified_asterisk | 11.6:cert4 |
| digium | certified_asterisk | 11.6:cert4 |
| digium | certified_asterisk | 11.6:cert5 |
| digium | certified_asterisk | 11.6:cert5 |
| digium | certified_asterisk | 11.6:cert6 |
| digium | certified_asterisk | 11.6:cert6 |
| digium | certified_asterisk | 11.6:cert7 |
| digium | certified_asterisk | 11.6:cert7 |
| digium | certified_asterisk | 11.6:cert8 |
| digium | certified_asterisk | 11.6:cert8 |
| digium | certified_asterisk | 11.6:cert9 |
| digium | certified_asterisk | 11.6.0 |
| digium | certified_asterisk | 11.6.0 |
| digium | certified_asterisk | 11.6.0:rc1 |
| digium | certified_asterisk | 11.6.0:rc2 |
| digium | certified_asterisk | 13.1:cert1 |
| digium | certified_asterisk | 13.1:cert1-rc1 |
| digium | certified_asterisk | 13.1:cert1-rc3 |
| digium | certified_asterisk | 13.1:cert2 |
| digium | certified_asterisk | 13.1:cert3 |
| digium | certified_asterisk | 13.1:cert3-rc1 |
| digium | certified_asterisk | 13.1:cert4 |
| digium | certified_asterisk | 13.1:cert5 |
| digium | certified_asterisk | 13.1:cert6 |
| digium | certified_asterisk | 13.1:cert7 |
| digium | certified_asterisk | 13.1:cert8 |
| digium | certified_asterisk | 13.1.0 |
| digium | certified_asterisk | 13.1.0:rc1 |
| digium | certified_asterisk | 13.1.0:rc2 |
| digium | certified_asterisk | 13.8:cert1 |
| digium | certified_asterisk | 13.8:cert1-rc2 |
| digium | certified_asterisk | 13.8:cert1-rc3 |
| digium | certified_asterisk | 13.8:cert1_rc1 |
| digium | certified_asterisk | 13.8:cert1_rc2 |
| digium | certified_asterisk | 13.8:cert1_rc3 |
| digium | certified_asterisk | 13.8:cert2 |
| digium | certified_asterisk | 13.8:cert2-rc1 |
| digium | certified_asterisk | 13.8:cert2_rc1 |
| digium | certified_asterisk | 13.8:cert3 |
| digium | certified_asterisk | 13.8:cert4 |
| digium | certified_asterisk | 13.8.0 |
| digium | certified_asterisk | 13.8.0:rc1 |
| digium | certified_asterisk | 13.13:cert1-rc1 |
| digium | certified_asterisk | 13.13:cert1-rc2 |
| digium | certified_asterisk | 13.13:cert1-rc3 |
| digium | certified_asterisk | 13.13:cert1-rc4 |
| digium | certified_asterisk | 13.13:cert2 |
| digium | certified_asterisk | 13.13:cert3 |
| digium | certified_asterisk | 13.13:cert4 |
| digium | certified_asterisk | 13.13:cert5 |
| digium | certified_asterisk | 13.13:cert6 |
| digium | certified_asterisk | 13.13:cert7 |
| digium | certified_asterisk | 13.13:cert8 |
| digium | certified_asterisk | 13.13:cert9 |
| digium | certified_asterisk | 13.13-cert2 |
| digium | certified_asterisk | 13.18:cert1 |
| digium | certified_asterisk | 13.18:cert1-rc1 |
| digium | certified_asterisk | 13.18:cert1-rc2 |
| digium | certified_asterisk | 13.18:cert1-rc3 |
| digium | certified_asterisk | 13.18:cert2 |
| digium | certified_asterisk | 13.18:cert3 |
| digium | certified_asterisk | 13.18:cert4 |
| digium | certified_asterisk | 13.21:cert1 |
| digium | certified_asterisk | 13.21:cert1-rc1 |
| digium | certified_asterisk | 13.21:cert1-rc2 |
| digium | certified_asterisk | 13.21:cert2 |
| digium | certified_asterisk | 13.21:cert3 |
| digium | asterisk | 13.0.0 ≤ 𝑥 < 13.27.1 |
| digium | asterisk | 15.0.0 ≤ 𝑥 < 15.7.3 |
| digium | asterisk | 16.0.0 ≤ 𝑥 < 16.4.1 |
| debian | debian_linux | 8.0 |
| debian | debian_linux | 9.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References