CVE-2025-54995
Asterisk remotely exploitable leak of RTP UDP ports and internal resources
概要
Asterisk remotely exploitable leak of RTP UDP ports and internal resources
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 18.26.4 and 18.9-cert17, RTP UDP ports and internal resources can leak due to a lack of session termination. This could result in leaks and resource exhaustion. This issue has been patched in versions 18.26.4 and 18.9-cert17.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
ディストリビューション別の修正状況
各ディストリビューションが公開している、この CVE の修正パッケージ
- Debian DEBIAN-CVE-2025-54995 asterisk 修正版: 1:16.28.0~dfsg-0+deb11u8
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- patch github.com
- patch github.com
- patch github.com
- web lists.debian.org