未評価
An issue was discovered in res_pjsip_t38.c in Sangoma Asterisk through 13.x and Certified Asterisk through 13.21-x. If it receives a re-invite initiat...
CVE-2019-18976
SecPulse初出
ディストリビューション別の修正状況
各ディストリビューションが公開している、この CVE の修正パッケージ
- Debian DEBIAN-CVE-2019-18976 asterisk 修正版: 1:16.1.1~dfsg-1
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
An issue was discovered in res_pjsip_t38.c in Sangoma Asterisk through 13.x and Certified Asterisk through 13.21-x. If it receives a re-invite initiating T.38 faxing and has a port of 0 and no c line in the SDP, a NULL pointer dereference and crash will occur. This is different from CVE-2019-18940.
参照URL
- advisory downloads.asterisk.org
- advisory lists.debian.org
- advisory packetstormsecurity.com
- advisory seclists.org
- advisory asterisk.org
- advisory cybersecurity-help.cz