Test Kennung:	1.3.6.1.4.1.25623.1.0.145418
Kategorie:	Denial of Service
Titel:	Asterisk DoS Vulnerability (AST-2021-003)
Zusammenfassung:	Asterisk is prone to a denial of service vulnerability where; remote attackers could prematurely tear down SRTP calls.
Beschreibung:	Summary: Asterisk is prone to a denial of service vulnerability where remote attackers could prematurely tear down SRTP calls. Vulnerability Insight: An unauthenticated remote attacker could replay SRTP packets which could cause an Asterisk instance configured without strict RTP validation to tear down calls prematurely. Affected Software/OS: Asterisk Open Source 13.38.1, 16.16.0, 17.9.1, 18.2.0 and 16.8-cert5. Solution: Update to version 13.38.2, 16.16.1, 17.9.2, 18.2.1, 16.8-cert6 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2021-26712 http://seclists.org/fulldisclosure/2021/Feb/59 http://packetstormsecurity.com/files/161473/Asterisk-Project-Security-Advisory-AST-2021-003.html https://downloads.asterisk.org/pub/security/
Copyright	Copyright (C) 2021 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.