Incorrect access controls in res_srtp.c in Sangoma Asterisk 13.38.1, 16.16.0, 17.9.1, and 18.2.0 and Certified Asterisk 16.8-cert5 allow a remote unauthenticated attacker to prematurely terminate secure calls by replaying SRTP packets.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Asterisk | Digium | 13.0.0 (including) | 13.38.2 (including) |
| Asterisk | Digium | 16.0.0 (including) | 16.16.1 (excluding) |
| Asterisk | Digium | 17.0.0 (including) | 17.9.2 (excluding) |
| Asterisk | Digium | 18.0 (including) | 18.2.1 (excluding) |
| Certified_asterisk | Digium | 16.8 (including) | 16.8 (including) |
| Certified_asterisk | Digium | 16.8-cert1-rc1 (including) | 16.8-cert1-rc1 (including) |
| Certified_asterisk | Digium | 16.8-cert1-rc2 (including) | 16.8-cert1-rc2 (including) |
| Certified_asterisk | Digium | 16.8-cert1-rc3 (including) | 16.8-cert1-rc3 (including) |
| Certified_asterisk | Digium | 16.8-cert1-rc4 (including) | 16.8-cert1-rc4 (including) |
| Certified_asterisk | Digium | 16.8-cert2 (including) | 16.8-cert2 (including) |
| Certified_asterisk | Digium | 16.8-cert3 (including) | 16.8-cert3 (including) |
| Certified_asterisk | Digium | 16.8-cert4 (including) | 16.8-cert4 (including) |
| Certified_asterisk | Digium | 16.8-cert4-rc1 (including) | 16.8-cert4-rc1 (including) |
| Certified_asterisk | Digium | 16.8-cert4-rc2 (including) | 16.8-cert4-rc2 (including) |
| Certified_asterisk | Digium | 16.8-cert4-rc3 (including) | 16.8-cert4-rc3 (including) |
| Certified_asterisk | Digium | 16.8-cert4-rc4 (including) | 16.8-cert4-rc4 (including) |
| Certified_asterisk | Digium | 16.8-cert5 (including) | 16.8-cert5 (including) |