Test Kennung:	1.3.6.1.4.1.25623.1.0.145417
Kategorie:	Denial of Service
Titel:	Asterisk DoS Vulnerability (AST-2021-002)
Zusammenfassung:	Asterisk is prone to a denial of service vulnerability when; negotiating T.38.
Beschreibung:	Summary: Asterisk is prone to a denial of service vulnerability when negotiating T.38. Vulnerability Insight: When re-negotiating for T.38 if the initial remote response was delayed just enough Asterisk would send both audio and T.38 in the SDP. If this happened, and the remote responded with a declined T.38 stream then Asterisk would crash. Affected Software/OS: Asterisk Open Source versions 16.15.0 through 16.16.0, 17.9.0 through 17.9.1, 18.1.0 through 18.2.0 and Certified Asterisk versions 16.8-cert4 and 16.8-cert5. Solution: Update to version 16.16.1, 17.9.2, 18.2.1, 16.8-cert6 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2021-26717 http://seclists.org/fulldisclosure/2021/Feb/58 http://packetstormsecurity.com/files/161471/Asterisk-Project-Security-Advisory-AST-2021-002.html https://downloads.asterisk.org/pub/security/
Copyright	Copyright (C) 2021 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.