Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2020-35652 →
DEBIAN-CVE-2020-35652
An issue was discovered in res_pjsip_diversion.c in Sangoma Asterisk before 13.38.0, 14.x through 16.x before 16.15.0, 17.x before 17.9.0, and 18.x be...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An issue was discovered in res_pjsip_diversion.c in Sangoma Asterisk before 13.38.0, 14.x through 16.x before 16.15.0, 17.x before 17.9.0, and 18.x before 18.1.0. A crash can occur when a SIP message is received with a History-Info header that contains a tel-uri, or when a SIP 181 response is received that contains a tel-uri in the Diversion header.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:14
asterisk
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:16.15.1~dfsg-1"}]}]
Références
- advisory security-tracker.debian.org