csaf_certbund - wid-sec-w-2023-1726

wid-sec-w-2023-1726

Vulnerability from csaf_certbund

Published

2023-07-11 22:00

Modified

2023-07-11 22:00

Summary

Asterisk: Schwachstelle ermöglicht Denial of Service oder Offenlegung von Informationen

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung

Asterisk ist eine komplette Open Source Multiprotokoll Telefonanlage (PBX) auf Softwarebasis.

Angriff

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Asterisk ausnutzen, um einen Denial of Service Angriff durchzuführen oder vertrauliche Informationen offenzulegen.

Betroffene Betriebssysteme

- UNIX

JSON

To clipboard

{
   document: {
      aggregate_severity: {
         text: "mittel",
      },
      category: "csaf_base",
      csaf_version: "2.0",
      distribution: {
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "de-DE",
      notes: [
         {
            category: "legal_disclaimer",
            text: "Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.",
         },
         {
            category: "description",
            text: "Asterisk ist eine komplette Open Source Multiprotokoll Telefonanlage (PBX) auf Softwarebasis.",
            title: "Produktbeschreibung",
         },
         {
            category: "summary",
            text: "Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Asterisk ausnutzen, um einen Denial of Service Angriff durchzuführen oder vertrauliche Informationen offenzulegen.",
            title: "Angriff",
         },
         {
            category: "general",
            text: "- UNIX",
            title: "Betroffene Betriebssysteme",
         },
      ],
      publisher: {
         category: "other",
         contact_details: "csaf-provider@cert-bund.de",
         name: "Bundesamt für Sicherheit in der Informationstechnik",
         namespace: "https://www.bsi.bund.de",
      },
      references: [
         {
            category: "self",
            summary: "WID-SEC-W-2023-1726 - CSAF Version",
            url: "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-1726.json",
         },
         {
            category: "self",
            summary: "WID-SEC-2023-1726 - Portal Version",
            url: "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-1726",
         },
         {
            category: "external",
            summary: "Github Advisory Asterisk vom 2023-07-11",
            url: "https://github.com/asterisk/asterisk/security/advisories/GHSA-4xjp-22g4-9fxm",
         },
      ],
      source_lang: "en-US",
      title: "Asterisk: Schwachstelle ermöglicht Denial of Service oder Offenlegung von Informationen",
      tracking: {
         current_release_date: "2023-07-11T22:00:00.000+00:00",
         generator: {
            date: "2024-08-15T17:55:20.819+00:00",
            engine: {
               name: "BSI-WID",
               version: "1.3.5",
            },
         },
         id: "WID-SEC-W-2023-1726",
         initial_release_date: "2023-07-11T22:00:00.000+00:00",
         revision_history: [
            {
               date: "2023-07-11T22:00:00.000+00:00",
               number: "1",
               summary: "Initiale Fassung",
            },
         ],
         status: "final",
         version: "1",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_name",
                        name: "Open Source Asterisk < 16.30.1",
                        product: {
                           name: "Open Source Asterisk < 16.30.1",
                           product_id: "T028527",
                           product_identification_helper: {
                              cpe: "cpe:/a:digium:asterisk:16.30.1",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "Open Source Asterisk < 18.18.1",
                        product: {
                           name: "Open Source Asterisk < 18.18.1",
                           product_id: "T028528",
                           product_identification_helper: {
                              cpe: "cpe:/a:digium:asterisk:18.18.1",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "Open Source Asterisk < 19.8.1",
                        product: {
                           name: "Open Source Asterisk < 19.8.1",
                           product_id: "T028529",
                           product_identification_helper: {
                              cpe: "cpe:/a:digium:asterisk:19.8.1",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "Open Source Asterisk < 20.3.1",
                        product: {
                           name: "Open Source Asterisk < 20.3.1",
                           product_id: "T028530",
                           product_identification_helper: {
                              cpe: "cpe:/a:digium:asterisk:20.3.1",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "Open Source Asterisk < certified-18.9-cert5",
                        product: {
                           name: "Open Source Asterisk < certified-18.9-cert5",
                           product_id: "T028531",
                           product_identification_helper: {
                              cpe: "cpe:/a:digium:asterisk:certified-18.9-cert5",
                           },
                        },
                     },
                  ],
                  category: "product_name",
                  name: "Asterisk",
               },
            ],
            category: "vendor",
            name: "Open Source",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2022-23537",
         notes: [
            {
               category: "description",
               text: "Es existiert eine Schwachstelle in Asterisk. Der Fehler besteht aufgrund eines Pufferüberlaufs beim Parsen speziell gestalteter STUN-Nachrichten mit unbekannten Attributen. Ein entfernter, anonymer Angreifer kann diese Schwachstelle ausnutzen, um einen Denial-of-Service-Zustand zu verursachen oder vertrauliche Informationen offenzulegen. Die Schwachstelle betrifft Benutzer, die ICE und/oder WebRTC verwenden.",
            },
         ],
         release_date: "2023-07-11T22:00:00.000+00:00",
         title: "CVE-2022-23537",
      },
   ],
}

cve-2022-23537

Vulnerability from cvelistv5

Published

2022-12-20 18:50

Modified

2025-02-13 16:32

Severity ?

6.5 (Medium) - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H

Summary

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. Buffer overread is possible when parsing a specially crafted STUN message with unknown attribute. The vulnerability affects applications that uses STUN including PJNATH and PJSUA-LIB. The patch is available as a commit in the master branch (2.13.1).

References

▼	URL	Tags
	https://github.com/pjsip/pjproject/security/advisories/GHSA-9pfh-r8x4-w26w	x_refsource_CONFIRM
	https://github.com/pjsip/pjproject/commit/d8440f4d711a654b511f50f79c0445b26f9dd1e1	x_refsource_MISC
	https://lists.debian.org/debian-lts-announce/2023/08/msg00038.html

Impacted products

	Vendor	Product	Version
	pjsip	pjproject	Version: <= 2.13

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-03T03:43:46.453Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "https://github.com/pjsip/pjproject/security/advisories/GHSA-9pfh-r8x4-w26w",
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/pjsip/pjproject/security/advisories/GHSA-9pfh-r8x4-w26w",
               },
               {
                  name: "https://github.com/pjsip/pjproject/commit/d8440f4d711a654b511f50f79c0445b26f9dd1e1",
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/pjsip/pjproject/commit/d8440f4d711a654b511f50f79c0445b26f9dd1e1",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2023/08/msg00038.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "pjproject",
               vendor: "pjsip",
               versions: [
                  {
                     status: "affected",
                     version: "<= 2.13",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. Buffer overread is possible when parsing a specially crafted STUN message with unknown attribute. The vulnerability affects applications that uses STUN including PJNATH and PJSUA-LIB. The patch is available as a commit in the master branch (2.13.1).",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "HIGH",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 6.5,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "LOW",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H",
                  version: "3.1",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-122",
                     description: "CWE-122: Heap-based Buffer Overflow",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2023-08-30T00:06:21.644Z",
            orgId: "a0819718-46f1-4df5-94e2-005712e83aaa",
            shortName: "GitHub_M",
         },
         references: [
            {
               name: "https://github.com/pjsip/pjproject/security/advisories/GHSA-9pfh-r8x4-w26w",
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/pjsip/pjproject/security/advisories/GHSA-9pfh-r8x4-w26w",
            },
            {
               name: "https://github.com/pjsip/pjproject/commit/d8440f4d711a654b511f50f79c0445b26f9dd1e1",
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/pjsip/pjproject/commit/d8440f4d711a654b511f50f79c0445b26f9dd1e1",
            },
            {
               url: "https://lists.debian.org/debian-lts-announce/2023/08/msg00038.html",
            },
         ],
         source: {
            advisory: "GHSA-9pfh-r8x4-w26w",
            discovery: "UNKNOWN",
         },
         title: "PJSIP vulnerable to heap buffer overflow when decoding STUN message",
      },
   },
   cveMetadata: {
      assignerOrgId: "a0819718-46f1-4df5-94e2-005712e83aaa",
      assignerShortName: "GitHub_M",
      cveId: "CVE-2022-23537",
      datePublished: "2022-12-20T18:50:45.398Z",
      dateReserved: "2022-01-19T21:23:53.794Z",
      dateUpdated: "2025-02-13T16:32:20.422Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted