https://seclists.org/oss-sec/2024/q2/250: asterisk security leases 18.23.1, 20.8.1, & 21.3.1
Published May 21, 2024
·Updated
Affected Software
1 affected component
Asterisk Asterisk
Frequently Asked Questions
1
What is the severity of GHSA-qqxj-v78h-hrf9?
The vulnerability GHSA-qqxj-v78h-hrf9 has been classified as a security issue allowing unauthorized SIP request handling.
2
How do I fix GHSA-qqxj-v78h-hrf9?
To fix GHSA-qqxj-v78h-hrf9, upgrade to Asterisk versions 18.23.1, 20.8.1, or 21.3.1 which contain the necessary security patches.
3
What types of systems are affected by GHSA-qqxj-v78h-hrf9?
GHSA-qqxj-v78h-hrf9 affects systems running Asterisk prior to versions 18.23.1, 20.8.1, and 21.3.1.
4
What does GHSA-qqxj-v78h-hrf9 exploit?
GHSA-qqxj-v78h-hrf9 exploits incorrect matching of unauthorized SIP requests as endpoints in the Asterisk server.
5
Can GHSA-qqxj-v78h-hrf9 lead to unauthorized access?
Yes, GHSA-qqxj-v78h-hrf9 can lead to unauthorized access and manipulation of SIP requests on the Asterisk server.