CVE-2022-42705
A use-after-free in res_pjsip_pubsub.c in Sangoma Asterisk 16.28, 18.14, 19.6, and certified/18.9-cert2 may allow a remote authenticated attacker to c...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A use-after-free in res_pjsip_pubsub.c in Sangoma Asterisk 16.28, 18.14, 19.6, and certified/18.9-cert2 may allow a remote authenticated attacker to crash Asterisk (denial of service) by performing activity on a subscription via a reliable transport at the same time that Asterisk is also performing activity on that subscription.
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Alpine Linux ALPINE-CVE-2022-42705 asterisk Corrigé dans: 18.20.2-r0
- Debian DEBIAN-CVE-2022-42705 asterisk Corrigé dans: 1:16.28.0~dfsg-0+deb11u2
- Ubuntu UBUNTU-CVE-2022-42705 asterisk
Références
- advisory github.com
- advisory nvd.nist.gov
- advisory debian.org
- web downloads.asterisk.org
- web lists.debian.org