ID de Prueba:	1.3.6.1.4.1.25623.1.0.145416
Categoría:	Denial of Service
Título:	Asterisk DoS Vulnerability (AST-2021-001)
Resumen:	Asterisk is prone to a denial of service vulnerability in; res_pjsip_diversion.
Descripción:	Summary: Asterisk is prone to a denial of service vulnerability in res_pjsip_diversion. Vulnerability Insight: If a registered user is tricked into dialing a malicious number that sends lots of 181 responses to Asterisk, each one will cause a 181 to be sent back to the original caller with an increasing number of entries in the 'Supported' header. Eventually the number of entries in the header exceeds the size of the entry array and causes a crash. Affected Software/OS: Asterisk Open Source version 13.38.1, 16.15.1 through 16.16.0, 17.9.1 and 18.1.1 through 18.2.0. Solution: Update to version 13.38.2, 16.16.1, 17.9.2, 18.2.1 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2020-35776 http://seclists.org/fulldisclosure/2021/Feb/57 http://packetstormsecurity.com/files/161470/Asterisk-Project-Security-Advisory-AST-2021-001.html https://issues.asterisk.org/
Copyright	Copyright (C) 2021 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.