CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
Percentile
71.7%
In Sangoma Asterisk through 16.28.0, 17.x and 18.x through 18.14.0, and
19.x through 19.6.0, an incoming Setup message to
addons/ooh323c/src/ooq931.c with a malformed Calling or Called Party IE can
cause a crash.