CVE-2025-54995
Asterisk remotely exploitable leak of RTP UDP ports and internal resources
Summary
Asterisk remotely exploitable leak of RTP UDP ports and internal resources
Original description
The description as published by the source.
Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 18.26.4 and 18.9-cert17, RTP UDP ports and internal resources can leak due to a lack of session termination. This could result in leaks and resource exhaustion. This issue has been patched in versions 18.26.4 and 18.9-cert17.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2025-54995 asterisk Fixed in: 1:16.28.0~dfsg-0+deb11u8
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- patch github.com
- patch github.com
- patch github.com
- web lists.debian.org