ID CVE-2019-18790
Summary An issue was discovered in channels/chan_sip.c in Sangoma Asterisk 13.x before 13.29.2, 16.x before 16.6.2, and 17.x before 17.0.1, and Certified Asterisk 13.21 before cert5. A SIP request can be sent to Asterisk that can change a SIP peer's IP address. A REGISTER does not need to occur, and calls can be hijacked as a result. The only thing that needs to be known is the peer's name; authentication details such as passwords do not need to be known. This vulnerability is only exploitable when the nat option is set to the default, or auto_force_rport.
References
Vulnerable Configurations
  • cpe:2.3:a:digium:certified_asterisk:13.21.0:cert4:*:*:*:*:*:*
    cpe:2.3:a:digium:certified_asterisk:13.21.0:cert4:*:*:*:*:*:*
  • cpe:2.3:a:digium:certified_asterisk:13.21.0:cert3:*:*:*:*:*:*
    cpe:2.3:a:digium:certified_asterisk:13.21.0:cert3:*:*:*:*:*:*
  • cpe:2.3:a:digium:certified_asterisk:13.21.0:cert2:*:*:*:*:*:*
    cpe:2.3:a:digium:certified_asterisk:13.21.0:cert2:*:*:*:*:*:*
  • cpe:2.3:a:digium:certified_asterisk:13.21.0:cert1:*:*:*:*:*:*
    cpe:2.3:a:digium:certified_asterisk:13.21.0:cert1:*:*:*:*:*:*
  • cpe:2.3:a:digium:certified_asterisk:13.21.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:digium:certified_asterisk:13.21.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.0.0:*:*:*:lts:*:*:*
    cpe:2.3:a:digium:asterisk:13.0.0:*:*:*:lts:*:*:*
  • cpe:2.3:a:digium:asterisk:13.0.0:beta1:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.0.0:beta1:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.0.0:beta2:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.0.0:beta2:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.0.0:beta3:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.0.0:beta3:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.1.0:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.1.0:*:*:*:lts:*:*:*
    cpe:2.3:a:digium:asterisk:13.1.0:*:*:*:lts:*:*:*
  • cpe:2.3:a:digium:asterisk:13.1.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.1.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.1.0:rc2:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.1.0:rc2:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.2.0:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.2.0:*:*:*:lts:*:*:*
    cpe:2.3:a:digium:asterisk:13.2.0:*:*:*:lts:*:*:*
  • cpe:2.3:a:digium:asterisk:13.2.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.2.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.2.1:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.3.0:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.3.0:*:*:*:lts:*:*:*
    cpe:2.3:a:digium:asterisk:13.3.0:*:*:*:lts:*:*:*
  • cpe:2.3:a:digium:asterisk:13.3.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.3.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.3.1:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.3.1:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.3.2:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.3.2:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.4.0:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.4.0:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.4.0:*:*:*:lts:*:*:*
    cpe:2.3:a:digium:asterisk:13.4.0:*:*:*:lts:*:*:*
  • cpe:2.3:a:digium:asterisk:13.4.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.4.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.5.0:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.5.0:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.5.0:*:*:*:lts:*:*:*
    cpe:2.3:a:digium:asterisk:13.5.0:*:*:*:lts:*:*:*
  • cpe:2.3:a:digium:asterisk:13.5.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.5.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.6.0:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.6.0:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.6.0:*:*:*:lts:*:*:*
    cpe:2.3:a:digium:asterisk:13.6.0:*:*:*:lts:*:*:*
  • cpe:2.3:a:digium:asterisk:13.6.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.6.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.6.0:rc2:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.6.0:rc2:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.6.0:rc3:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.6.0:rc3:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.7.0:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.7.0:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.7.0:*:*:*:lts:*:*:*
    cpe:2.3:a:digium:asterisk:13.7.0:*:*:*:lts:*:*:*
  • cpe:2.3:a:digium:asterisk:13.7.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.7.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.7.0:rc2:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.7.0:rc2:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.7.0:rc3:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.7.0:rc3:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.7.0:rc3:*:*:lts:*:*:*
    cpe:2.3:a:digium:asterisk:13.7.0:rc3:*:*:lts:*:*:*
  • cpe:2.3:a:digium:asterisk:13.7.1:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.7.1:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.7.2:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.7.2:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.8.0:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.8.0:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.8.0:*:*:*:lts:*:*:*
    cpe:2.3:a:digium:asterisk:13.8.0:*:*:*:lts:*:*:*
  • cpe:2.3:a:digium:asterisk:13.8.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.8.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.8.1:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.8.1:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.8.1:*:*:*:lts:*:*:*
    cpe:2.3:a:digium:asterisk:13.8.1:*:*:*:lts:*:*:*
  • cpe:2.3:a:digium:asterisk:13.8.2:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.8.2:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.8.2:*:*:*:lts:*:*:*
    cpe:2.3:a:digium:asterisk:13.8.2:*:*:*:lts:*:*:*
  • cpe:2.3:a:digium:asterisk:13.9.0:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.9.0:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.9.0:*:*:*:lts:*:*:*
    cpe:2.3:a:digium:asterisk:13.9.0:*:*:*:lts:*:*:*
  • cpe:2.3:a:digium:asterisk:13.9.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.9.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.9.0:rc2:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.9.0:rc2:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.9.1:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.9.1:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.10.0:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.10.0:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.10.0:*:*:*:lts:*:*:*
    cpe:2.3:a:digium:asterisk:13.10.0:*:*:*:lts:*:*:*
  • cpe:2.3:a:digium:asterisk:13.10.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.10.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.10.0:rc2:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.10.0:rc2:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.10.0:rc3:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.10.0:rc3:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.11.0:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.11.0:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.11.0:*:*:*:lts:*:*:*
    cpe:2.3:a:digium:asterisk:13.11.0:*:*:*:lts:*:*:*
  • cpe:2.3:a:digium:asterisk:13.11.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.11.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.11.0:rc2:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.11.0:rc2:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.11.1:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.11.1:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.11.2:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.11.2:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.12:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.12:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.12.0:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.12.0:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.12.0:*:*:*:lts:*:*:*
    cpe:2.3:a:digium:asterisk:13.12.0:*:*:*:lts:*:*:*
  • cpe:2.3:a:digium:asterisk:13.12.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.12.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.12.1:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.12.1:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.12.1:*:*:*:lts:*:*:*
    cpe:2.3:a:digium:asterisk:13.12.1:*:*:*:lts:*:*:*
  • cpe:2.3:a:digium:asterisk:13.12.2:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.12.2:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.12.2:*:*:*:lts:*:*:*
    cpe:2.3:a:digium:asterisk:13.12.2:*:*:*:lts:*:*:*
  • cpe:2.3:a:digium:asterisk:13.13:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.13:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.13.0:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.13.0:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.13.0:*:*:*:lts:*:*:*
    cpe:2.3:a:digium:asterisk:13.13.0:*:*:*:lts:*:*:*
  • cpe:2.3:a:digium:asterisk:13.13.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.13.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.13.0:rc2:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.13.0:rc2:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.13.1:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.13.1:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.14.0:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.14.0:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.14.0:*:*:*:lts:*:*:*
    cpe:2.3:a:digium:asterisk:13.14.0:*:*:*:lts:*:*:*
  • cpe:2.3:a:digium:asterisk:13.14.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.14.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.14.0:rc2:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.14.0:rc2:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.14.1:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.14.1:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.15.0:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.15.0:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.15.0:*:*:*:lts:*:*:*
    cpe:2.3:a:digium:asterisk:13.15.0:*:*:*:lts:*:*:*
  • cpe:2.3:a:digium:asterisk:13.15.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.15.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.15.0:rc2:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.15.0:rc2:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.15.0:rc3:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.15.0:rc3:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.15.1:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.15.1:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.16.0:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.16.0:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.16.0:*:*:*:lts:*:*:*
    cpe:2.3:a:digium:asterisk:13.16.0:*:*:*:lts:*:*:*
  • cpe:2.3:a:digium:asterisk:13.16.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.16.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.16.0:rc2:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.16.0:rc2:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.17.0:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.17.0:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.17.0:*:*:*:lts:*:*:*
    cpe:2.3:a:digium:asterisk:13.17.0:*:*:*:lts:*:*:*
  • cpe:2.3:a:digium:asterisk:13.17.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.17.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.17.1:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.17.1:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.17.2:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.17.2:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.18.0:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.18.0:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.18.0:*:*:*:lts:*:*:*
    cpe:2.3:a:digium:asterisk:13.18.0:*:*:*:lts:*:*:*
  • cpe:2.3:a:digium:asterisk:13.18.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.18.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.18.0:rc2:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.18.0:rc2:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.18.1:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.18.1:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.18.2:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.18.2:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.18.3:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.18.3:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.18.4:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.18.4:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.18.5:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.18.5:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.19.0:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.19.0:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.19.0:*:*:*:lts:*:*:*
    cpe:2.3:a:digium:asterisk:13.19.0:*:*:*:lts:*:*:*
  • cpe:2.3:a:digium:asterisk:13.19.1:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.19.1:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.19.2:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.19.2:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.20.0:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.20.0:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.20.0:*:*:*:lts:*:*:*
    cpe:2.3:a:digium:asterisk:13.20.0:*:*:*:lts:*:*:*
  • cpe:2.3:a:digium:asterisk:13.21.0:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.21.0:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.21.0:*:*:*:lts:*:*:*
    cpe:2.3:a:digium:asterisk:13.21.0:*:*:*:lts:*:*:*
  • cpe:2.3:a:digium:asterisk:13.21.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.21.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.21.1:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.21.1:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.22.0:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.22.0:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.22.0:*:*:*:lts:*:*:*
    cpe:2.3:a:digium:asterisk:13.22.0:*:*:*:lts:*:*:*
  • cpe:2.3:a:digium:asterisk:13.22.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.22.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.23.0:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.23.0:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.23.0:*:*:*:lts:*:*:*
    cpe:2.3:a:digium:asterisk:13.23.0:*:*:*:lts:*:*:*
  • cpe:2.3:a:digium:asterisk:13.23.1:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.23.1:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.23.1:*:*:*:lts:*:*:*
    cpe:2.3:a:digium:asterisk:13.23.1:*:*:*:lts:*:*:*
  • cpe:2.3:a:digium:asterisk:13.24.0:-:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.24.0:-:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.24.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.24.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.24.1:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.24.1:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.25.0:-:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.25.0:-:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.25.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.25.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.25.0:rc2:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.25.0:rc2:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.25.0:rc3:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.25.0:rc3:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.26.0:-:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.26.0:-:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.26.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.26.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.27.0:-:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.27.0:-:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.27.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.27.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.27.1:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.27.1:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.28.0:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.28.0:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.28.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.28.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.28.1:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.28.1:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.29.0:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.29.0:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.29.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.29.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:13.29.1:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:13.29.1:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:16.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:16.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:16.0.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:16.0.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:16.0.0:rc2:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:16.0.0:rc2:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:16.0.0:rc3:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:16.0.0:rc3:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:16.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:16.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:16.1.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:16.1.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:16.2.0:-:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:16.2.0:-:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:16.2.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:16.2.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:16.2.0:rc2:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:16.2.0:rc2:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:16.2.1:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:16.2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:16.3.0:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:16.3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:16.3.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:16.3.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:16.4.0:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:16.4.0:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:16.4.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:16.4.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:16.4.1:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:16.4.1:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:16.5.0:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:16.5.0:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:16.5.1:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:16.5.1:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:16.6.0:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:16.6.0:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:16.6.1:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:16.6.1:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:asterisk:17.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:digium:asterisk:17.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:digium:certified_asterisk:13.21.0:*:*:*:*:*:*:*
    cpe:2.3:a:digium:certified_asterisk:13.21.0:*:*:*:*:*:*:*
  • cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
    cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
  • cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
    cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
CVSS
Base: 5.8 (as of 13-05-2022 - 20:56)
Impact:
Exploitability:
CWE CWE-862
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL NONE
cvss-vector via4 AV:N/AC:M/Au:N/C:P/I:P/A:N
refmap via4
misc
mlist [debian-lts-announce] 20191130 [SECURITY] [DLA 2017-1] asterisk security update
Last major update 13-05-2022 - 20:56
Published 22-11-2019 - 17:15
Last modified 13-05-2022 - 20:56
Back to Top