ID de Prueba:	1.3.6.1.4.1.25623.1.0.145417
Categoría:	Denial of Service
Título:	Asterisk DoS Vulnerability (AST-2021-002)
Resumen:	Asterisk is prone to a denial of service vulnerability when; negotiating T.38.
Descripción:	Summary: Asterisk is prone to a denial of service vulnerability when negotiating T.38. Vulnerability Insight: When re-negotiating for T.38 if the initial remote response was delayed just enough Asterisk would send both audio and T.38 in the SDP. If this happened, and the remote responded with a declined T.38 stream then Asterisk would crash. Affected Software/OS: Asterisk Open Source versions 16.15.0 through 16.16.0, 17.9.0 through 17.9.1, 18.1.0 through 18.2.0 and Certified Asterisk versions 16.8-cert4 and 16.8-cert5. Solution: Update to version 16.16.1, 17.9.2, 18.2.1, 16.8-cert6 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2021-26717 http://seclists.org/fulldisclosure/2021/Feb/58 http://packetstormsecurity.com/files/161471/Asterisk-Project-Security-Advisory-AST-2021-002.html https://downloads.asterisk.org/pub/security/
Copyright	Copyright (C) 2021 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.