CVE-2021-26712
18.02.2021, 21:15
Incorrect access controls in res_srtp.c in Sangoma Asterisk 13.38.1, 16.16.0, 17.9.1, and 18.2.0 and Certified Asterisk 16.8-cert5 allow a remote unauthenticated attacker to prematurely terminate secure calls by replaying SRTP packets.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| digium | asterisk | 13.0.0 ≤ 𝑥 ≤ 13.38.2 |
| digium | asterisk | 16.0.0 ≤ 𝑥 < 16.16.1 |
| digium | asterisk | 17.0.0 ≤ 𝑥 < 17.9.2 |
| digium | asterisk | 18.0 ≤ 𝑥 < 18.2.1 |
| digium | certified_asterisk | 16.8 |
| digium | certified_asterisk | 16.8:cert1-rc1 |
| digium | certified_asterisk | 16.8:cert1-rc2 |
| digium | certified_asterisk | 16.8:cert1-rc3 |
| digium | certified_asterisk | 16.8:cert1-rc4 |
| digium | certified_asterisk | 16.8:cert2 |
| digium | certified_asterisk | 16.8:cert3 |
| digium | certified_asterisk | 16.8:cert4 |
| digium | certified_asterisk | 16.8:cert4-rc1 |
| digium | certified_asterisk | 16.8:cert4-rc2 |
| digium | certified_asterisk | 16.8:cert4-rc3 |
| digium | certified_asterisk | 16.8:cert4-rc4 |
| digium | certified_asterisk | 16.8:cert5 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
References