ID de Prueba:	1.3.6.1.4.1.25623.1.0.146371
Categoría:	Denial of Service
Título:	Asterisk Multiple DoS Vulnerabilities (AST-2021-008, AST-2021-009)
Resumen:	Asterisk is prone to multiple denial of service (DoS); vulnerabilities.
Descripción:	Summary: Asterisk is prone to multiple denial of service (DoS) vulnerabilities. Vulnerability Insight: The following vulnerabilities exist: - CVE-2021-32558: If the IAX2 channel driver receives a packet that contains an unsupported media format it can cause a crash to occur in Asterisk. - CVE-2021-32686: Depending on the timing, it's possible for Asterisk to crash when using a TLS connection if the underlying socket parent/listener gets destroyed during the handshake. Affected Software/OS: Asterisk Open Source 13.x, 16.x, 17.x, 18.x and 16.x Certified Asterisk. Solution: Update to version 13.38.3, 16.19.1, 17.9.4, 18.5.1, 16.8-cert10 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2021-32558 Debian Security Information: DSA-4999 (Google Search) https://www.debian.org/security/2021/dsa-4999 http://seclists.org/fulldisclosure/2021/Jul/49 http://packetstormsecurity.com/files/163639/Asterisk-Project-Security-Advisory-AST-2021-008.html https://downloads.asterisk.org/pub/security/AST-2021-008.html https://issues.asterisk.org/jira/browse/ASTERISK-29392 https://lists.debian.org/debian-lts-announce/2021/08/msg00005.html Common Vulnerability Exposure (CVE) ID: CVE-2021-32686 https://github.com/pjsip/pjproject/security/advisories/GHSA-cv8x-p47p-99wr https://security.gentoo.org/glsa/202210-37 https://github.com/pjsip/pjproject/commit/d5f95aa066f878b0aef6a64e60b61e8626e664cd https://github.com/pjsip/pjproject/pull/2716 https://github.com/pjsip/pjproject/releases/tag/2.11.1 https://lists.debian.org/debian-lts-announce/2022/03/msg00035.html
Copyright	Copyright (C) 2021 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.