[SECURITY] [DLA 2017-2] asterisk regression update

2019-12-0114:13:24

lists.debian.org

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:N/I:N/A:P

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

5.5 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

75.8%

JSON

Package : asterisk
Version : 1:11.13.1~dfsg-2+deb8u8

The backport of the CVE-2019-13161 fix caused a regression and
has been reverted.

For Debian 8 "Jessie", this problem has been fixed in version
1:11.13.1~dfsg-2+deb8u8.

We recommend that you upgrade your asterisk packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

cu
Adrian

OSVersionArchitecturePackageVersionFilename
Debian8i386asterisk-mobile< 1:11.13.1~dfsg-2+deb8u8asterisk-mobile_1:11.13.1~dfsg-2+deb8u8_i386.deb
Debian8amd64asterisk-mysql< 1:11.13.1~dfsg-2+deb8u8asterisk-mysql_1:11.13.1~dfsg-2+deb8u8_amd64.deb
Debian8armhfasterisk-ooh323< 1:11.13.1~dfsg-2+deb8u8asterisk-ooh323_1:11.13.1~dfsg-2+deb8u8_armhf.deb
Debian8amd64asterisk< 1:11.13.1~dfsg-2+deb8u8asterisk_1:11.13.1~dfsg-2+deb8u8_amd64.deb
Debian8allasterisk< 1:11.13.1~dfsg-2+deb8u8asterisk_1:11.13.1~dfsg-2+deb8u8_all.deb
Debian8i386asterisk-voicemail-imapstorage< 1:11.13.1~dfsg-2+deb8u8asterisk-voicemail-imapstorage_1:11.13.1~dfsg-2+deb8u8_i386.deb
Debian8amd64asterisk-ooh323< 1:11.13.1~dfsg-2+deb8u8asterisk-ooh323_1:11.13.1~dfsg-2+deb8u8_amd64.deb
Debian8armhfasterisk-mobile< 1:11.13.1~dfsg-2+deb8u8asterisk-mobile_1:11.13.1~dfsg-2+deb8u8_armhf.deb
Debian8armelasterisk-voicemail-odbcstorage< 1:11.13.1~dfsg-2+deb8u8asterisk-voicemail-odbcstorage_1:11.13.1~dfsg-2+deb8u8_armel.deb
Debian8armelasterisk-mp3< 1:11.13.1~dfsg-2+deb8u8asterisk-mp3_1:11.13.1~dfsg-2+deb8u8_armel.deb

OS	Version	Architecture	Package	Version	Filename
Debian	8	i386	asterisk-mobile	< 1:11.13.1~dfsg-2+deb8u8	asterisk-mobile_1:11.13.1~dfsg-2+deb8u8_i386.deb
Debian	8	amd64	asterisk-mysql	< 1:11.13.1~dfsg-2+deb8u8	asterisk-mysql_1:11.13.1~dfsg-2+deb8u8_amd64.deb
Debian	8	armhf	asterisk-ooh323	< 1:11.13.1~dfsg-2+deb8u8	asterisk-ooh323_1:11.13.1~dfsg-2+deb8u8_armhf.deb
Debian	8	amd64	asterisk	< 1:11.13.1~dfsg-2+deb8u8	asterisk_1:11.13.1~dfsg-2+deb8u8_amd64.deb
Debian	8	all	asterisk	< 1:11.13.1~dfsg-2+deb8u8	asterisk_1:11.13.1~dfsg-2+deb8u8_all.deb
Debian	8	i386	asterisk-voicemail-imapstorage	< 1:11.13.1~dfsg-2+deb8u8	asterisk-voicemail-imapstorage_1:11.13.1~dfsg-2+deb8u8_i386.deb
Debian	8	amd64	asterisk-ooh323	< 1:11.13.1~dfsg-2+deb8u8	asterisk-ooh323_1:11.13.1~dfsg-2+deb8u8_amd64.deb
Debian	8	armhf	asterisk-mobile	< 1:11.13.1~dfsg-2+deb8u8	asterisk-mobile_1:11.13.1~dfsg-2+deb8u8_armhf.deb
Debian	8	armel	asterisk-voicemail-odbcstorage	< 1:11.13.1~dfsg-2+deb8u8	asterisk-voicemail-odbcstorage_1:11.13.1~dfsg-2+deb8u8_armel.deb
Debian	8	armel	asterisk-mp3	< 1:11.13.1~dfsg-2+deb8u8	asterisk-mp3_1:11.13.1~dfsg-2+deb8u8_armel.deb