Asterisk remotely exploitable leak of RTP UDP ports and internal resources
Résumé
Asterisk remotely exploitable leak of RTP UDP ports and internal resources
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 18.26.4 and 18.9-cert17, RTP UDP ports and internal resources can leak due to a lack of session termination. This could result in leaks and resource exhaustion. This issue has been patched in versions 18.26.4 and 18.9-cert17.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2025-54995 asterisk Corrigé dans: 1:16.28.0~dfsg-0+deb11u8
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- patch github.com
- patch github.com
- patch github.com
- web lists.debian.org