An issue was discovered in Asterisk Open Source through 13.27.0, 14.x and 15.x through 15.7.2, and 16.x through 16.4.0, and Certified Asterisk through 13.21-cert3. A pointer dereference in chan_sip while handling SDP negotiation allows an attacker to crash Asterisk when handling an SDP answer to an outgoing T.38 re-invite. To exploit this vulnerability an attacker must cause the chan_sip module to send a T.38 re-invite request to them. Upon receipt, the attacker must send an SDP answer containing both a T.38 UDPTL stream and another media stream containing only a codec (which is not permitted according to the chan_sip configuration).
A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Certified_asterisk | Digium | 11.6 | 11.6 |
Certified_asterisk | Digium | 1.8.14.0 | 1.8.14.0 |
Certified_asterisk | Digium | 11.4.0 | 11.4.0 |
Certified_asterisk | Digium | 11.6 | 11.6 |
Certified_asterisk | Digium | 11.6 | 11.6 |
Certified_asterisk | Digium | 11.6 | 11.6 |
Certified_asterisk | Digium | 13.1.0 | 13.1.0 |
Certified_asterisk | Digium | 11.1.0 | 11.1.0 |
Certified_asterisk | Digium | 1.8.0.0 | 1.8.0.0 |
Certified_asterisk | Digium | 1.8.10.0 | 1.8.10.0 |
Certified_asterisk | Digium | 1.8.15 | 1.8.15 |
Certified_asterisk | Digium | 1.8.15 | 1.8.15 |
Certified_asterisk | Digium | 1.8.11 | 1.8.11 |
Certified_asterisk | Digium | 11.6 | 11.6 |
Certified_asterisk | Digium | 1.8.12.0 | 1.8.12.0 |
Certified_asterisk | Digium | 1.8.3.0 | 1.8.3.0 |
Certified_asterisk | Digium | 13.8 | 13.8 |
Certified_asterisk | Digium | 1.8.8.0 | 1.8.8.0 |
Certified_asterisk | Digium | 1.8.11 | 1.8.11 |
Certified_asterisk | Digium | 11.6 | 11.6 |
Certified_asterisk | Digium | 1.8.11 | 1.8.11 |
Certified_asterisk | Digium | 11.6 | 11.6 |
Certified_asterisk | Digium | 11.3.0 | 11.3.0 |
Certified_asterisk | Digium | 1.8.11 | 1.8.11 |
Certified_asterisk | Digium | 11.6 | 11.6 |
Certified_asterisk | Digium | 13.1.0 | 13.1.0 |
Certified_asterisk | Digium | 1.8.11.0 | 1.8.11.0 |
Certified_asterisk | Digium | 1.8.11.0 | 1.8.11.0 |
Certified_asterisk | Digium | 1.8.11 | 1.8.11 |
Certified_asterisk | Digium | 1.8.6.0 | 1.8.6.0 |
Certified_asterisk | Digium | 1.8.0.0 | 1.8.0.0 |
Certified_asterisk | Digium | 1.8.0.0 | 1.8.0.0 |
Certified_asterisk | Digium | 11.3.0 | 11.3.0 |
Certified_asterisk | Digium | 11.6 | 11.6 |
Certified_asterisk | Digium | 11.0.0 | 11.0.0 |
Certified_asterisk | Digium | 1.8.28 | 1.8.28 |
Certified_asterisk | Digium | 1.8.0.0 | 1.8.0.0 |
Certified_asterisk | Digium | 1.8.0.0 | 1.8.0.0 |
Certified_asterisk | Digium | 1.8.7.0 | 1.8.7.0 |
Certified_asterisk | Digium | 1.8.13.0 | 1.8.13.0 |
Certified_asterisk | Digium | 1.8.28.0 | 1.8.28.0 |
Certified_asterisk | Digium | 1.8.1.0 | 1.8.1.0 |
Certified_asterisk | Digium | 13.8 | 13.8 |
Certified_asterisk | Digium | 1.8.8.0 | 1.8.8.0 |
Certified_asterisk | Digium | 1.8.28 | 1.8.28 |
Certified_asterisk | Digium | 11.0.0 | 11.0.0 |
Certified_asterisk | Digium | 1.8.11 | 1.8.11 |
Certified_asterisk | Digium | 11.5.0 | 11.5.0 |
Certified_asterisk | Digium | 1.8.9.0 | 1.8.9.0 |
Certified_asterisk | Digium | 1.8.4.0 | 1.8.4.0 |
Certified_asterisk | Digium | 1.8.4.0 | 1.8.4.0 |
Certified_asterisk | Digium | 11.6 | 11.6 |
Certified_asterisk | Digium | 1.8.15 | 1.8.15 |
Certified_asterisk | Digium | 11.6 | 11.6 |
Certified_asterisk | Digium | 11.4.0 | 11.4.0 |
Certified_asterisk | Digium | 11.6 | 11.6 |
Certified_asterisk | Digium | 1.8.0.0 | 1.8.0.0 |
Certified_asterisk | Digium | 1.8.11 | 1.8.11 |
Certified_asterisk | Digium | 1.8.15 | 1.8.15 |
Certified_asterisk | Digium | 1.8.15 | 1.8.15 |
Certified_asterisk | Digium | 1.8.15 | 1.8.15 |
Certified_asterisk | Digium | 1.8.7.0 | 1.8.7.0 |
Certified_asterisk | Digium | 11.4.0 | 11.4.0 |
Certified_asterisk | Digium | 11.6.0 | 11.6.0 |
Certified_asterisk | Digium | 1.8.5.0 | 1.8.5.0 |
Certified_asterisk | Digium | 11.6 | 11.6 |
Certified_asterisk | Digium | 1.8.0.0 | 1.8.0.0 |
Certified_asterisk | Digium | 1.8.13.0 | 1.8.13.0 |
Certified_asterisk | Digium | 13.8 | 13.8 |
Certified_asterisk | Digium | 1.8.8.0 | 1.8.8.0 |
Certified_asterisk | Digium | 11.6 | 11.6 |
Certified_asterisk | Digium | 13.8.0 | 13.8.0 |
Certified_asterisk | Digium | 1.8.12.0 | 1.8.12.0 |
Certified_asterisk | Digium | 1.8.28 | 1.8.28 |
Certified_asterisk | Digium | 1.8.6.0 | 1.8.6.0 |
Certified_asterisk | Digium | 11.3.0 | 11.3.0 |
Certified_asterisk | Digium | 1.8.15 | 1.8.15 |
Certified_asterisk | Digium | 1.8.9.0 | 1.8.9.0 |
Certified_asterisk | Digium | 1.8.11 | 1.8.11 |
Certified_asterisk | Digium | 1.8.10.0 | 1.8.10.0 |
Certified_asterisk | Digium | 1.8.1.0 | 1.8.1.0 |
Certified_asterisk | Digium | 11.1.0 | 11.1.0 |
Certified_asterisk | Digium | 11.6 | 11.6 |
Certified_asterisk | Digium | 11.6 | 11.6 |
Certified_asterisk | Digium | 11.6 | 11.6 |
Certified_asterisk | Digium | 1.8.3.0 | 1.8.3.0 |
Certified_asterisk | Digium | 1.8.0.0 | 1.8.0.0 |
Certified_asterisk | Digium | 11.6.0 | 11.6.0 |
Certified_asterisk | Digium | 11.6 | 11.6 |
Certified_asterisk | Digium | 1.8.4.0 | 1.8.4.0 |
Certified_asterisk | Digium | 13.8.0 | 13.8.0 |
Certified_asterisk | Digium | 1.8.9.0 | 1.8.9.0 |
Certified_asterisk | Digium | 1.8.12.0 | 1.8.12.0 |
Certified_asterisk | Digium | 1.8.10.0 | 1.8.10.0 |
Certified_asterisk | Digium | 11.6 | 11.6 |
Certified_asterisk | Digium | 1.8.13.0 | 1.8.13.0 |
Certified_asterisk | Digium | 1.8.15 | 1.8.15 |
Certified_asterisk | Digium | 11.4.0 | 11.4.0 |
Certified_asterisk | Digium | 11.6 | 11.6 |
Certified_asterisk | Digium | 1.8.11 | 1.8.11 |
Certified_asterisk | Digium | 13.13 | 13.13 |
Certified_asterisk | Digium | 11.6 | 11.6 |
Certified_asterisk | Digium | 1.8.15 | 1.8.15 |
Certified_asterisk | Digium | 13.1.0 | 13.1.0 |
Certified_asterisk | Digium | 13.1 | 13.1 |
Certified_asterisk | Digium | 11.6 | 11.6 |
Certified_asterisk | Digium | 1.8.9.0 | 1.8.9.0 |
Certified_asterisk | Digium | 11.6 | 11.6 |
Certified_asterisk | Digium | 1.8.0.0 | 1.8.0.0 |
Certified_asterisk | Digium | 1.8.15 | 1.8.15 |
Certified_asterisk | Digium | 1.8.4.0 | 1.8.4.0 |
Certified_asterisk | Digium | 1.8.10.0 | 1.8.10.0 |
Certified_asterisk | Digium | 1.8.12.0 | 1.8.12.0 |
Certified_asterisk | Digium | 1.8.3.0 | 1.8.3.0 |
Certified_asterisk | Digium | 1.8.0.0 | 1.8.0.0 |
Certified_asterisk | Digium | 1.8.2.0 | 1.8.2.0 |
Certified_asterisk | Digium | 11.0.0 | 11.0.0 |
Certified_asterisk | Digium | 13.1 | 13.1 |
Certified_asterisk | Digium | 11.5.0 | 11.5.0 |
Certified_asterisk | Digium | 1.8.15 | 1.8.15 |
Certified_asterisk | Digium | 1.8.10.0 | 1.8.10.0 |
Certified_asterisk | Digium | 1.8.14.0 | 1.8.14.0 |
Certified_asterisk | Digium | 1.8.11 | 1.8.11 |
Certified_asterisk | Digium | 1.8.5.0 | 1.8.5.0 |
Certified_asterisk | Digium | 11.6 | 11.6 |
Certified_asterisk | Digium | 1.8.7.0 | 1.8.7.0 |
Certified_asterisk | Digium | 13.8 | 13.8 |
Certified_asterisk | Digium | 1.8.8.0 | 1.8.8.0 |
Certified_asterisk | Digium | 1.8.6.0 | 1.8.6.0 |
Certified_asterisk | Digium | 1.8.15 | 1.8.15 |
Certified_asterisk | Digium | 1.8.0.0 | 1.8.0.0 |
Certified_asterisk | Digium | 1.8.2.0 | 1.8.2.0 |
Certified_asterisk | Digium | 11.6 | 11.6 |
Certified_asterisk | Digium | 13.13 | 13.13 |
Certified_asterisk | Digium | 1.8.11.0 | 1.8.11.0 |
Certified_asterisk | Digium | 1.8.6.0 | 1.8.6.0 |
Certified_asterisk | Digium | 1.8.8.0 | 1.8.8.0 |
Certified_asterisk | Digium | 11.6 | 11.6 |
Certified_asterisk | Digium | 1.8.11.0 | 1.8.11.0 |
Certified_asterisk | Digium | 11.6 | 11.6 |
Certified_asterisk | Digium | 11.5.0 | 11.5.0 |
Certified_asterisk | Digium | 11.1.0 | 11.1.0 |
Certified_asterisk | Digium | 11.1.0 | 11.1.0 |
Certified_asterisk | Digium | 13.8 | 13.8 |
Certified_asterisk | Digium | 11.6 | 11.6 |
Certified_asterisk | Digium | 1.8.11 | 1.8.11 |
Certified_asterisk | Digium | 1.8.3.0 | 1.8.3.0 |
Certified_asterisk | Digium | 13.13 | 13.13 |
Certified_asterisk | Digium | 11.6 | 11.6 |
Certified_asterisk | Digium | 11.6.0 | 11.6.0 |
Certified_asterisk | Digium | 1.8.8.0 | 1.8.8.0 |
Certified_asterisk | Digium | 11.6 | 11.6 |
Certified_asterisk | Digium | 11.6.0 | 11.6.0 |
Certified_asterisk | Digium | 1.8.15 | 1.8.15 |
Certified_asterisk | Digium | 13.13 | 13.13 |
Certified_asterisk | Digium | 13.13 | 13.13 |
Certified_asterisk | Digium | 13.13 | 13.13 |
Certified_asterisk | Digium | 13.13 | 13.13 |
Certified_asterisk | Digium | 13.18 | 13.18 |
Certified_asterisk | Digium | 13.18 | 13.18 |
Certified_asterisk | Digium | 13.18 | 13.18 |
Certified_asterisk | Digium | 13.21 | 13.21 |
Certified_asterisk | Digium | 1.8.28 | 1.8.28 |
Certified_asterisk | Digium | 1.8.28 | 1.8.28 |
Certified_asterisk | Digium | 1.8.28 | 1.8.28 |
Certified_asterisk | Digium | 1.8.28 | 1.8.28 |
Certified_asterisk | Digium | 1.8.28 | 1.8.28 |
Certified_asterisk | Digium | 13.21 | 13.21 |
Certified_asterisk | Digium | 13.21 | 13.21 |
Certified_asterisk | Digium | 13.21 | 13.21 |
Certified_asterisk | Digium | 13.21 | 13.21 |
Certified_asterisk | Digium | 1.8.11 | 1.8.11 |
Certified_asterisk | Digium | 1.8.11 | 1.8.11 |
Certified_asterisk | Digium | 1.8.11 | 1.8.11 |
Certified_asterisk | Digium | 1.8.11 | 1.8.11 |
Certified_asterisk | Digium | 1.8.11 | 1.8.11 |
Certified_asterisk | Digium | 1.8.15 | 1.8.15 |
Certified_asterisk | Digium | 11.2 | 11.2 |
Certified_asterisk | Digium | 11.2 | 11.2 |
Certified_asterisk | Digium | 11.2 | 11.2 |
Certified_asterisk | Digium | 11.2 | 11.2 |
Certified_asterisk | Digium | 11.6 | 11.6 |
Certified_asterisk | Digium | 11.6 | 11.6 |
Certified_asterisk | Digium | 11.6 | 11.6 |
Certified_asterisk | Digium | 11.6 | 11.6 |
Certified_asterisk | Digium | 11.6 | 11.6 |
Certified_asterisk | Digium | 11.6 | 11.6 |
Certified_asterisk | Digium | 13.1 | 13.1 |
Certified_asterisk | Digium | 13.1 | 13.1 |
Certified_asterisk | Digium | 13.1 | 13.1 |
Certified_asterisk | Digium | 13.1 | 13.1 |
Certified_asterisk | Digium | 13.1 | 13.1 |
Certified_asterisk | Digium | 13.1 | 13.1 |
Certified_asterisk | Digium | 13.1 | 13.1 |
Certified_asterisk | Digium | 13.1 | 13.1 |
Certified_asterisk | Digium | 13.1 | 13.1 |
Certified_asterisk | Digium | 13.8 | 13.8 |
Certified_asterisk | Digium | 13.8 | 13.8 |
Certified_asterisk | Digium | 13.8 | 13.8 |
Certified_asterisk | Digium | 13.8 | 13.8 |
Certified_asterisk | Digium | 13.8 | 13.8 |
Certified_asterisk | Digium | 13.8 | 13.8 |
Certified_asterisk | Digium | 13.13 | 13.13 |
Certified_asterisk | Digium | 13.13 | 13.13 |
Certified_asterisk | Digium | 13.13 | 13.13 |
Certified_asterisk | Digium | 13.13 | 13.13 |
Certified_asterisk | Digium | 13.13 | 13.13 |
Certified_asterisk | Digium | 13.13-cert2 | 13.13-cert2 |
Certified_asterisk | Digium | 13.18 | 13.18 |
Certified_asterisk | Digium | 13.18 | 13.18 |
Certified_asterisk | Digium | 13.18 | 13.18 |
Certified_asterisk | Digium | 13.18 | 13.18 |