Lucene search

K
freebsdFreeBSD818B2BCB-A46F-11E9-BED9-001999F8D30B
HistoryJun 13, 2019 - 12:00 a.m.

asterisk -- Remote crash vulnerability with MESSAGE messages

2019-06-1300:00:00
vuxml.freebsd.org
12

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

0.047 Low

EPSS

Percentile

92.7%

The Asterisk project reports:

A specially crafted SIP in-dialog MESSAGE message can cause Asterisk to crash.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchasterisk13< 13.27.1UNKNOWN
FreeBSDanynoarchasterisk15< 15.7.3UNKNOWN
FreeBSDanynoarchasterisk16< 16.4.1UNKNOWN

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

0.047 Low

EPSS

Percentile

92.7%