medium
5.3
CWE
476
Advisory Published
Updated

CVE-2019-13161: Null Pointer Dereference

First published: Fri Jul 12 2019(Updated: )

An issue was discovered in Asterisk Open Source through 13.27.0, 14.x and 15.x through 15.7.2, and 16.x through 16.4.0, and Certified Asterisk through 13.21-cert3. A pointer dereference in chan_sip while handling SDP negotiation allows an attacker to crash Asterisk when handling an SDP answer to an outgoing T.38 re-invite. To exploit this vulnerability an attacker must cause the chan_sip module to send a T.38 re-invite request to them. Upon receipt, the attacker must send an SDP answer containing both a T.38 UDPTL stream and another media stream containing only a codec (which is not permitted according to the chan_sip configuration).

Credit: cve@mitre.org

Affected SoftwareAffected VersionHow to fix
Asterisk=1.8.0.0
Asterisk=1.8.0.0-beta1
Asterisk=1.8.0.0-beta2
Asterisk=1.8.0.0-beta3
Asterisk=1.8.0.0-beta4
Asterisk=1.8.0.0-beta5
Asterisk=1.8.0.0-rc1
Asterisk=1.8.0.0-rc2
Asterisk=1.8.0.0-rc3
Asterisk=1.8.0.0-rc4
Asterisk=1.8.0.0-rc5
Asterisk=1.8.1.0
Asterisk=1.8.1.0-rc1
Asterisk=1.8.2.0
Asterisk=1.8.2.0-rc1
Asterisk=1.8.3.0
Asterisk=1.8.3.0-rc1
Asterisk=1.8.3.0-rc2
Asterisk=1.8.3.0-rc3
Asterisk=1.8.4.0
Asterisk=1.8.4.0-rc1
Asterisk=1.8.4.0-rc2
Asterisk=1.8.4.0-rc3
Asterisk=1.8.5.0
Asterisk=1.8.5.0-rc1
Asterisk=1.8.6.0
Asterisk=1.8.6.0-rc1
Asterisk=1.8.6.0-rc2
Asterisk=1.8.6.0-rc3
Asterisk=1.8.7.0
Asterisk=1.8.7.0-rc1
Asterisk=1.8.7.0-rc2
Asterisk=1.8.8.0
Asterisk=1.8.8.0-rc1
Asterisk=1.8.8.0-rc2
Asterisk=1.8.8.0-rc3
Asterisk=1.8.8.0-rc4
Asterisk=1.8.8.0-rc5
Asterisk=1.8.9.0
Asterisk=1.8.9.0-rc1
Asterisk=1.8.9.0-rc2
Asterisk=1.8.9.0-rc3
Asterisk=1.8.10.0
Asterisk=1.8.10.0-rc1
Asterisk=1.8.10.0-rc2
Asterisk=1.8.10.0-rc3
Asterisk=1.8.10.0-rc4
Asterisk=1.8.11-cert
Asterisk=1.8.11-cert1
Asterisk=1.8.11-cert10
Asterisk=1.8.11-cert2
Asterisk=1.8.11-cert3
Asterisk=1.8.11-cert3-rc1
Asterisk=1.8.11-cert3-rc2
Asterisk=1.8.11-cert4
Asterisk=1.8.11-cert5
Asterisk=1.8.11-cert5-rc1
Asterisk=1.8.11-cert5-rc2
Asterisk=1.8.11-cert6
Asterisk=1.8.11-cert7
Asterisk=1.8.11-cert8
Asterisk=1.8.11-cert9
Asterisk=1.8.11-cert9-rc1
Asterisk=1.8.11.0
Asterisk=1.8.11.0-rc1
Asterisk=1.8.11.0-rc2
Asterisk=1.8.11.0-rc3
Asterisk=1.8.12.0
Asterisk=1.8.12.0-rc1
Asterisk=1.8.12.0-rc2
Asterisk=1.8.12.0-rc3
Asterisk=1.8.13.0
Asterisk=1.8.13.0-rc1
Asterisk=1.8.13.0-rc2
Asterisk=1.8.14.0-rc1
Asterisk=1.8.14.0-rc2
Asterisk=1.8.15
Asterisk=1.8.15-cert1
Asterisk=1.8.15-cert1-rc1
Asterisk=1.8.15-cert1-rc2
Asterisk=1.8.15-cert1-rc3
Asterisk=1.8.15-cert1_rc1
Asterisk=1.8.15-cert1_rc2
Asterisk=1.8.15-cert1_rc3
Asterisk=1.8.15-cert2
Asterisk=1.8.15-cert3
Asterisk=1.8.15-cert4
Asterisk=1.8.15-cert5
Asterisk=1.8.15-cert6
Asterisk=1.8.15-cert7
Asterisk=1.8.28
Asterisk=1.8.28-cert1
Asterisk=1.8.28-cert1-rc1
Asterisk=1.8.28-cert2
Asterisk=1.8.28-cert2
Asterisk=1.8.28-cert3
Asterisk=1.8.28-cert4
Asterisk=1.8.28-cert5
Asterisk=1.8.28.0
Asterisk=11.0.0
Asterisk=11.0.0-rc1
Asterisk=11.0.0-rc2
Asterisk=11.1.0
Asterisk=11.1.0-rc1
Asterisk=11.1.0-rc2
Asterisk=11.1.0-rc3
Asterisk=11.2-cert1
Asterisk=11.2-cert1-rc2
Asterisk=11.2-cert2
Asterisk=11.2-cert3
Asterisk=11.3.0
Asterisk=11.3.0-rc1
Asterisk=11.3.0-rc2
Asterisk=11.4.0
Asterisk=11.4.0-rc1
Asterisk=11.4.0-rc2
Asterisk=11.4.0-rc3
Asterisk=11.5.0
Asterisk=11.5.0-rc1
Asterisk=11.5.0-rc2
Asterisk=11.6-cert1
Asterisk=11.6-cert1
Asterisk=11.6-cert1-rc1
Asterisk=11.6-cert1-rc2
Asterisk=11.6-cert1_rc1
Asterisk=11.6-cert1_rc2
Asterisk=11.6-cert10
Asterisk=11.6-cert11
Asterisk=11.6-cert12
Asterisk=11.6-cert12
Asterisk=11.6-cert13
Asterisk=11.6-cert13
Asterisk=11.6-cert14
Asterisk=11.6-cert14
Asterisk=11.6-cert14-rc1
Asterisk=11.6-cert14-rc2
Asterisk=11.6-cert15
Asterisk=11.6-cert15
Asterisk=11.6-cert16
Asterisk=11.6-cert17
Asterisk=11.6-cert18
Asterisk=11.6-cert2
Asterisk=11.6-cert2
Asterisk=11.6-cert3
Asterisk=11.6-cert3
Asterisk=11.6-cert4
Asterisk=11.6-cert4
Asterisk=11.6-cert5
Asterisk=11.6-cert5
Asterisk=11.6-cert6
Asterisk=11.6-cert6
Asterisk=11.6-cert7
Asterisk=11.6-cert7
Asterisk=11.6-cert8
Asterisk=11.6-cert8
Asterisk=11.6-cert9
Asterisk=11.6.0
Asterisk=11.6.0
Asterisk=11.6.0-rc1
Asterisk=11.6.0-rc2
Asterisk=13.1-cert1
Asterisk=13.1-cert1-rc1
Asterisk=13.1-cert1-rc3
Asterisk=13.1-cert2
Asterisk=13.1-cert3
Asterisk=13.1-cert3-rc1
Asterisk=13.1-cert4
Asterisk=13.1-cert5
Asterisk=13.1-cert6
Asterisk=13.1-cert7
Asterisk=13.1-cert8
Asterisk=13.1.0
Asterisk=13.1.0-rc1
Asterisk=13.1.0-rc2
Asterisk=13.8-cert1
Asterisk=13.8-cert1-rc2
Asterisk=13.8-cert1-rc3
Asterisk=13.8-cert1_rc1
Asterisk=13.8-cert1_rc2
Asterisk=13.8-cert1_rc3
Asterisk=13.8-cert2
Asterisk=13.8-cert2-rc1
Asterisk=13.8-cert2_rc1
Asterisk=13.8-cert3
Asterisk=13.8-cert4
Asterisk=13.8.0
Asterisk=13.8.0-rc1
Asterisk=13.13-cert1-rc1
Asterisk=13.13-cert1-rc2
Asterisk=13.13-cert1-rc3
Asterisk=13.13-cert1-rc4
Asterisk=13.13-cert2
Asterisk=13.13-cert3
Asterisk=13.13-cert4
Asterisk=13.13-cert5
Asterisk=13.13-cert6
Asterisk=13.13-cert7
Asterisk=13.13-cert8
Asterisk=13.13-cert9
Asterisk=13.13-cert2
Asterisk=13.18-cert1
Asterisk=13.18-cert1-rc1
Asterisk=13.18-cert1-rc2
Asterisk=13.18-cert1-rc3
Asterisk=13.18-cert2
Asterisk=13.18-cert3
Asterisk=13.18-cert4
Asterisk=13.21-cert1
Asterisk=13.21-cert1-rc1
Asterisk=13.21-cert1-rc2
Asterisk=13.21-cert2
Asterisk=13.21-cert3
Asterisk>=13.0.0<13.27.1
Asterisk>=15.0.0<15.7.3
Asterisk>=16.0.0<16.4.1
Debian Linux=8.0
Debian Linux=9.0

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is the severity of CVE-2019-13161?

    CVE-2019-13161 has been assigned a high severity level due to its potential to crash Asterisk servers.

  • How do I fix CVE-2019-13161?

    To fix CVE-2019-13161, upgrade Asterisk to version 13.27.1, 14.x, 15.7.3, or 16.4.1 and later.

  • Which Asterisk versions are affected by CVE-2019-13161?

    CVE-2019-13161 affects Asterisk versions up to 13.27.0, 14.x through 15.7.2, and 16.x through 16.4.0.

  • What type of vulnerability is CVE-2019-13161?

    CVE-2019-13161 is a pointer dereference vulnerability that occurs during SDP negotiation.

  • Can CVE-2019-13161 be exploited remotely?

    Yes, CVE-2019-13161 can be exploited remotely by sending crafted SDP messages to an affected Asterisk server.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203