ID de Prueba:	1.3.6.1.4.1.25623.1.0.145418
Categoría:	Denial of Service
Título:	Asterisk DoS Vulnerability (AST-2021-003)
Resumen:	Asterisk is prone to a denial of service vulnerability where; remote attackers could prematurely tear down SRTP calls.
Descripción:	Summary: Asterisk is prone to a denial of service vulnerability where remote attackers could prematurely tear down SRTP calls. Vulnerability Insight: An unauthenticated remote attacker could replay SRTP packets which could cause an Asterisk instance configured without strict RTP validation to tear down calls prematurely. Affected Software/OS: Asterisk Open Source 13.38.1, 16.16.0, 17.9.1, 18.2.0 and 16.8-cert5. Solution: Update to version 13.38.2, 16.16.1, 17.9.2, 18.2.1, 16.8-cert6 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2021-26712 http://seclists.org/fulldisclosure/2021/Feb/59 http://packetstormsecurity.com/files/161473/Asterisk-Project-Security-Advisory-AST-2021-003.html https://downloads.asterisk.org/pub/security/
Copyright	Copyright (C) 2021 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.