DeutschShown in its original language — a full translation is planned for a future version.
Asterisk: Mehrere Schwachstellen
view advisory published 2022-03-06
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Asterisk und Digium Certified Asterisk ausnutzen, um beliebigen Programmcode auszuführen, einen Denial of Service Zustand herbeizuführen oder Informationen offenzulegen.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-23608US | critical9.8 | — | ||
PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In versions… | ||||
| CVE-2022-21723US | critical9.1 | — | ||
PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In versions… | ||||
| CVE-2021-37706US | critical9.8 | — | ||
PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In affected… | ||||
02
references
External citations — patches, advisories, analysis.
- Asterisk Project Security Advisory - AST-2022-004 vom 2022-03-06external
- Asterisk Project Security Advisory - AST-2022-005 vom 2022-03-06external
- Asterisk Project Security Advisory - AST-2022-006 vom 2022-03-06external
- Debian Security Advisory DLA-2962 vom 2022-03-28external
- Debian Security Advisory DLA-3194 vom 2022-11-17external
- Debian Security Advisory DSA-5285 vom 2022-11-17external
- Ubuntu Security Notice USN-8122-1 vom 2026-03-24external
- WID-SEC-W-2022-2108 - CSAF Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan