Test Kennung:	1.3.6.1.4.1.25623.1.0.145416
Kategorie:	Denial of Service
Titel:	Asterisk DoS Vulnerability (AST-2021-001)
Zusammenfassung:	Asterisk is prone to a denial of service vulnerability in; res_pjsip_diversion.
Beschreibung:	Summary: Asterisk is prone to a denial of service vulnerability in res_pjsip_diversion. Vulnerability Insight: If a registered user is tricked into dialing a malicious number that sends lots of 181 responses to Asterisk, each one will cause a 181 to be sent back to the original caller with an increasing number of entries in the 'Supported' header. Eventually the number of entries in the header exceeds the size of the entry array and causes a crash. Affected Software/OS: Asterisk Open Source version 13.38.1, 16.15.1 through 16.16.0, 17.9.1 and 18.1.1 through 18.2.0. Solution: Update to version 13.38.2, 16.16.1, 17.9.2, 18.2.1 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2020-35776 http://seclists.org/fulldisclosure/2021/Feb/57 http://packetstormsecurity.com/files/161470/Asterisk-Project-Security-Advisory-AST-2021-001.html https://issues.asterisk.org/
Copyright	Copyright (C) 2021 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.