MEDIUM🇬🇧 English

CVE-2024-35190

CVSS 5.8v3.1pub. 2024-05-17upd. 2025-08-26

Asterisk is an open source private branch exchange and telephony toolkit. After upgrade to 18.23.0, ALL unauthorized SIP requests are identified as PJSIP Endpoint of local asterisk server. This vulnerability is fixed in 18.23.1, 20.8.1, and 21.3.1.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N

  • Sangoma Asterisk

    APP
    Sangoma
    18.23.020.8.021.3.0
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje

Powiązane podatności

CVE-2024-57520CRITICAL9.8PL ✓ten sam produkt

Insecure Permissions w Sangoma Asterisk v22 — tworzenie plików poza katalogiem aplikacji

CVE-2022-21723CRITICAL9.1PL ✓ten sam produkt

PJSIP: odczyt poza granicami bufora przy parsowaniu multipart SIP

CVE-2025-1131HIGH7.0ten sam produkt

A local privilege escalation vulnerability exists in the safe_asterisk script included with the Asterisk toolk...

CVE-2025-57767HIGH7.5ten sam produkt

Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.15.2, 21.10.2, ...

CVE-2025-47779HIGH7.7ten sam produkt

Asterisk is an open-source private branch exchange (PBX). Prior to versions 18.26.2, 20.14.1, 21.9.1, and 22.4...