An issue was discovered in res_pjsip_session.c in Digium Asterisk through...
Vulnerability Description
An issue was discovered in res_pjsip_session.c in Digium Asterisk through 13.38.1; 14.x, 15.x, and 16.x through 16.16.0; 17.x through 17.9.1; and 18.x through 18.2.0, and Certified Asterisk through 16.8-cert5. An SDP negotiation vulnerability in PJSIP allows a remote server to potentially crash Asterisk by sending specific SIP responses that cause an SDP negotiation failure.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-26906
Credits & Attribution
No credits recorded in the NVD database.
References
- https://downloads.asterisk.org/pub/security/
- http://seclists.org/fulldisclosure/2021/Feb/61
- https://downloads.asterisk.org/pub/security/AST-2021-005.html
- https://issues.asterisk.org/jira/browse/ASTERISK-29196
- http://packetstormsecurity.com/files/161477/Asterisk-Project-Security-Advisory-AST-2021-005.html
More from digium
View All →Affected Vendor
digium
View all reports →Affected Software
Timeline
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.