Unrated
An Integer Signedness issue (for a return code) in the res_pjsip_sdp_rtp module in Digium Asterisk versions 15.7.1 and earlier and 16.1.1 and earlier...
CVE-2019-7251
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Alpine Linux ALPINE-CVE-2019-7251 asterisk Fixed in: 16.3.0-r0
- Debian DEBIAN-CVE-2019-7251 asterisk Fixed in: 1:16.2.1~dfsg-1
Original description The description as published by the source.
An Integer Signedness issue (for a return code) in the res_pjsip_sdp_rtp module in Digium Asterisk versions 15.7.1 and earlier and 16.1.1 and earlier allows remote authenticated users to crash Asterisk via a specially crafted SDP protocol violation.
References
- patch downloads.asterisk.org
- report issues.asterisk.org