what you don't know can hurt you

Asterisk Project Security Advisory - AST-2019-002

Asterisk Project Security Advisory - AST-2019-002
Posted Jul 12, 2019
Authored by George Joseph, Gil Richard | Site asterisk.org

Asterisk Project Security Advisory - A specially crafted SIP in-dialog MESSAGE message can cause Asterisk to crash.

tags | advisory
advisories | CVE-2019-12827
MD5 | 7da13e55cd8ce9754ba01c6e12efdff4

Asterisk Project Security Advisory - AST-2019-002

Change Mirror Download
               Asterisk Project Security Advisory - AST-2019-002

Product Asterisk
Summary Remote crash vulnerability with MESSAGE messages
Nature of Advisory Denial Of Service
Susceptibility Remote Authenticated Sessions
Severity Low
Exploits Known No
Reported On June 13, 2019
Reported By Gil Richard
Posted On June 14,2019
Last Updated On George Joseph
Advisory Contact gjoseph AT digium DOT com
CVE Name CVE-2019-12827

Description A specially crafted SIP in-dialog MESSAGE message can cause
Asterisk to crash.

Resolution Upgrade Asterisk to a fixed version.

Affected Versions
Product Release Series
Certified Asterisk 13.21-cert All releases
Asterisk Open Source 13.x All releases
Asterisk Open Source 15.x All releases
Asterisk Open Source 16.x All releases

Corrected In
Product Release
Certified Asterisk 13.21-cert4
Asterisk Open Source 13.27.1
Asterisk Open Source 15.7.3
Asterisk Open Source 16.4.1

Patches
SVN URL Revision
http://downloads.asterisk.org/pub/security/AST-2019-002-13.21.diff Certified
Asterisk
13.21-cert4
http://downloads.asterisk.org/pub/security/AST-2019-002-13.diff Asterisk 13
http://downloads.asterisk.org/pub/security/AST-2019-002-15.diff Asterisk 15
http://downloads.asterisk.org/pub/security/AST-2019-002-16.diff Asterisk 16

Links https://issues.asterisk.org/jira/browse/ASTERISK-28447

Asterisk Project Security Advisories are posted at
http://www.asterisk.org/security

This document may be superseded by later versions; if so, the latest
version will be posted at
http://downloads.digium.com/pub/security/AST-2019-002.pdf and
http://downloads.digium.com/pub/security/AST-2019-002.html

Revision History
Date Editor Revisions Made
June 14, 2019 George Joseph Initial revision

Asterisk Project Security Advisory - AST-2019-002
Copyright © 2018 Digium, Inc. All Rights Reserved.
Permission is hereby granted to distribute and publish this advisory in its
original, unaltered form.

Comments

RSS Feed Subscribe to this comment feed

No comments yet, be the first!

Login or Register to post a comment

File Archive:

July 2019

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Jul 1st
    34 Files
  • 2
    Jul 2nd
    15 Files
  • 3
    Jul 3rd
    9 Files
  • 4
    Jul 4th
    8 Files
  • 5
    Jul 5th
    2 Files
  • 6
    Jul 6th
    3 Files
  • 7
    Jul 7th
    1 Files
  • 8
    Jul 8th
    15 Files
  • 9
    Jul 9th
    15 Files
  • 10
    Jul 10th
    20 Files
  • 11
    Jul 11th
    17 Files
  • 12
    Jul 12th
    16 Files
  • 13
    Jul 13th
    2 Files
  • 14
    Jul 14th
    1 Files
  • 15
    Jul 15th
    20 Files
  • 16
    Jul 16th
    27 Files
  • 17
    Jul 17th
    7 Files
  • 18
    Jul 18th
    5 Files
  • 19
    Jul 19th
    12 Files
  • 20
    Jul 20th
    0 Files
  • 21
    Jul 21st
    0 Files
  • 22
    Jul 22nd
    0 Files
  • 23
    Jul 23rd
    0 Files
  • 24
    Jul 24th
    0 Files
  • 25
    Jul 25th
    0 Files
  • 26
    Jul 26th
    0 Files
  • 27
    Jul 27th
    0 Files
  • 28
    Jul 28th
    0 Files
  • 29
    Jul 29th
    0 Files
  • 30
    Jul 30th
    0 Files
  • 31
    Jul 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2019 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close