Test Kennung:	1.3.6.1.4.1.25623.1.0.145094
Kategorie:	Denial of Service
Titel:	Asterisk Multiple DoS Vulnerabilities (AST-2020-003, AST-2020-004)
Zusammenfassung:	Asterisk is prone to multiple denial of service; vulnerabilities.
Beschreibung:	Summary: Asterisk is prone to multiple denial of service vulnerabilities. Vulnerability Insight: Multiple flaws exist in the res_pjsip_diversion module: - A crash can occur when a SIP message is received that has a History-Info header, which contains a tel-uri. - A crash can occur when a SIP 181 response is received that has a Diversion header, which contains a tel-uri. Affected Software/OS: Asterisk Open Source 13.38.0, 16.15.0, 17.9.0 and 18.1.0. Solution: Update to version 13.38.1, 16.15.1, 17.9.1, 18.1.1 or later. CVSS Score: 4.0 CVSS Vector: AV:N/AC:L/Au:S/C:N/I:N/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2020-35652 https://issues.asterisk.org/jira/browse/ASTERISK-29191 https://issues.asterisk.org/jira/browse/ASTERISK-29219
Copyright	Copyright (C) 2020 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.