NetSight
IP …
medium6.5

CVE-2021-46837

res_pjsip_t38 in Sangoma Asterisk 16.x before 16.16.2, 17.x before 17.9.3, and 18.x before 18.2.2, and Certified Asterisk before 16.8-cert7, allows an attacker…

Impact

res_pjsip_t38 in Sangoma Asterisk 16.x before 16.16.2, 17.x before 17.9.3, and 18.x before 18.2.2, and Certified Asterisk before 16.8-cert7, allows an attacker to trigger a crash by sending an m=image line and zero port in a response to a T.38 re-invite initiated by Asterisk. This is a re-occurrence of the CVE-2019-15297 symptoms but not for exactly the same reason. The crash occurs because there is an append operation relative to the active topology, but this should instead be a replace operation.

Affected products

VendorProductAffected versions
AsteriskCertified Asterisk
Version 16.8.0
DigiumAsterisk
from 16.0.0 before 16.16.2
from 17.0.0 before 17.9.3
from 18.0.0 before 18.2.2
DebianDebian Linux
Versions 9.0, 10.0, 11.0

Weakness classification

CWE-476

References