CVE-2022-42705

A use-after-free in res_pjsip_pubsub.c in Sangoma Asterisk 16.28, 18.14, 19.6, and certified/18.9-cert2 may allow a remote authenticated attacker to c...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

A use-after-free in res_pjsip_pubsub.c in Sangoma Asterisk 16.28, 18.14, 19.6, and certified/18.9-cert2 may allow a remote authenticated attacker to crash Asterisk (denial of service) by performing activity on a subscription via a reliable transport at the same time that Asterisk is also performing activity on that subscription.

出典: OSV.dev (Open Source Vulnerabilities) NVD OSV

ディストリビューション別の修正状況

各ディストリビューションが公開している、この CVE の修正パッケージ

Alpine Linux ALPINE-CVE-2022-42705 asterisk 修正版: 18.20.2-r0
Debian DEBIAN-CVE-2022-42705 asterisk 修正版: 1:16.28.0~dfsg-0+deb11u2
Ubuntu UBUNTU-CVE-2022-42705 asterisk

参照URL

advisory github.com
advisory nvd.nist.gov
advisory debian.org
web downloads.asterisk.org
web lists.debian.org