CVE-2021-26713: Buffer Overflow
A stack-based buffer overflow in resrtpasterisk.c in Sangoma Asterisk before 16.16.1, 17.x before 17.9.2, and 18.x before 18.2.1 and Certified Asterisk before 16.8-cert6 allows an authenticated WebRTC client to cause an Asterisk crash by sending multiple hold/unhold requests in quick succession. This is caused by a signedness comparison mismatch.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
The vulnerability ID of this vulnerability is CVE-2021-26713.
What is the severity of CVE-2021-26713?
The severity of CVE-2021-26713 is medium with a severity value of 6.5.
Which software versions are affected by CVE-2021-26713?
The affected software versions include Sangoma Asterisk before 16.16.1, 17.x before 17.9.2, 18.x before 18.2.1, and Certified Asterisk before 16.8-cert6.
How can an authenticated WebRTC client exploit CVE-2021-26713?
An authenticated WebRTC client can exploit CVE-2021-26713 by sending multiple hold/unhold requests in quick succession, causing an Asterisk crash.
Is there a fix available for CVE-2021-26713?
Yes, the fix for CVE-2021-26713 is available. Please refer to the official references for more information.