Lucene search
Alpine Linux Development TeamALPINE:CVE-2022-37325HistoryDec 05, 2022 - 9:15 p.m.
CVE-2022-37325
2022-12-0521:15:10
Alpine Linux Development Team
security.alpinelinux.org
18
sangoma
asterisk
vulnerability
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
7.6
Confidence
High
EPSS
0.003
Percentile
71.7%
In Sangoma Asterisk through 16.28.0, 17.x and 18.x through 18.14.0, and 19.x through 19.6.0, an incoming Setup message to addons/ooh323c/src/ooq931.c with a malformed Calling or Called Party IE can cause a crash.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | edge-main | noarch | asterisk | < 18.15.1-r0 | UNKNOWN |
| Alpine | 3.16-main | noarch | asterisk | < 18.20.2-r0 | UNKNOWN |
| Alpine | 3.17-main | noarch | asterisk | < 18.15.1-r0 | UNKNOWN |
| Alpine | 3.18-main | noarch | asterisk | < 18.15.1-r0 | UNKNOWN |
| Alpine | 3.19-main | noarch | asterisk | < 18.15.1-r0 | UNKNOWN |
| Alpine | 3.20-main | noarch | asterisk | < 18.15.1-r0 | UNKNOWN |
Related
veracode
veracode
Denial Of Service (DoS)
2022-12-13 12:22:58
ubuntucve
ubuntucve
CVE-2022-37325
2022-12-05 00:00:00
cvelist
cvelist
CVE-2022-37325
2022-12-05 00:00:00
debiancve
debiancve
CVE-2022-37325
2022-12-05 21:15:10
prion
prion
Code injection
2022-12-05 21:15:00
cve
cve
CVE-2022-37325
2022-12-05 21:15:10
osv
osv
CVE-2022-37325
2022-12-05 21:15:10
asterisk - security update
2023-02-23 00:00:00
asterisk - security update
2023-02-22 00:00:00
nvd
nvd
CVE-2022-37325
2022-12-05 21:15:10
freebsd
freebsd
Asterisk -- multiple vulnerabilities
2022-12-01 00:00:00
openvas
openvas
Asterisk Multiple Vulnerabilities (AST-2022-007, AST-2022-008, AST-2022-009)
2022-12-02 00:00:00
Debian: Security Advisory (DSA-5358-1)
2023-02-24 00:00:00
Debian: Security Advisory (DLA-3335-1)
2023-02-23 00:00:00
nessus
nessus
FreeBSD : Asterisk -- multiple vulnerabilities (8dd438ed-a338-11ed-b48b-589cfc0f81b0)
2023-02-02 00:00:00
Debian DLA-3335-1 : asterisk - LTS security update
2023-02-24 00:00:00
Debian DSA-5358-1 : asterisk - security update
2023-02-24 00:00:00
debian
debian
[SECURITY] [DLA 3335-1] asterisk security update
2023-02-22 22:36:41
[SECURITY] [DSA 5358-1] asterisk security update
2023-02-23 09:14:43
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
7.6
Confidence
High
EPSS
0.003
Percentile
71.7%
Related for ALPINE:CVE-2022-37325