Unrated
An issue was discovered in res_pjsip_t38.c in Sangoma Asterisk through 13.x and Certified Asterisk through 13.21-x. If it receives a re-invite initiat...
CVE-2019-18976
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2019-18976 asterisk Fixed in: 1:16.1.1~dfsg-1
Original description The description as published by the source.
An issue was discovered in res_pjsip_t38.c in Sangoma Asterisk through 13.x and Certified Asterisk through 13.21-x. If it receives a re-invite initiating T.38 faxing and has a port of 0 and no c line in the SDP, a NULL pointer dereference and crash will occur. This is different from CVE-2019-18940.
References
- advisory downloads.asterisk.org
- advisory lists.debian.org
- advisory packetstormsecurity.com
- advisory seclists.org
- advisory asterisk.org
- advisory cybersecurity-help.cz