Test ID:	1.3.6.1.4.1.25623.1.0.145416
Category:	Denial of Service
Title:	Asterisk DoS Vulnerability (AST-2021-001)
Summary:	Asterisk is prone to a denial of service vulnerability in; res_pjsip_diversion.
Description:	Summary: Asterisk is prone to a denial of service vulnerability in res_pjsip_diversion. Vulnerability Insight: If a registered user is tricked into dialing a malicious number that sends lots of 181 responses to Asterisk, each one will cause a 181 to be sent back to the original caller with an increasing number of entries in the 'Supported' header. Eventually the number of entries in the header exceeds the size of the entry array and causes a crash. Affected Software/OS: Asterisk Open Source version 13.38.1, 16.15.1 through 16.16.0, 17.9.1 and 18.1.1 through 18.2.0. Solution: Update to version 13.38.2, 16.16.1, 17.9.2, 18.2.1 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2020-35776 http://seclists.org/fulldisclosure/2021/Feb/57 http://packetstormsecurity.com/files/161470/Asterisk-Project-Security-Advisory-AST-2021-001.html https://issues.asterisk.org/
Copyright	Copyright (C) 2021 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.