CVE-2015-1558

Published: Feb 9, 2015Modified: May 6, 2026

3.5

Vector

AV:N/AC:M/Au:S/C:N/I:N/A:P

Exploitability: 6.8 / Impact: 2.9

Source: NVD

Description

Asterisk Open Source 12.x before 12.8.1 and 13.x before 13.1.1, when using the PJSIP channel driver, does not properly reclaim RTP ports, which allows remote authenticated users to cause a denial of service (file descriptor consumption) via an SDP offer containing only incompatible codecs.

Affected (34)

Products: Digium: Asterisk

Digium

1 product

Asterisk

Configuration A

34 vulnerable

Vulnerable Software	Affected Versions
Digium Asterisk	Version 12.0.0
Digium Asterisk	Version 12.1.0
Digium Asterisk	Version 12.1.0 rc1
Digium Asterisk	Version 12.1.0 rc2
Digium Asterisk	Version 12.1.0 rc3
Digium Asterisk	Version 12.1.1
Digium Asterisk	Version 12.2.0
Digium Asterisk	Version 12.2.0 rc1
Digium Asterisk	Version 12.2.0 rc2
Digium Asterisk	Version 12.2.0 rc3
Digium Asterisk	Version 12.3.0
Digium Asterisk	Version 12.3.0 rc1
Digium Asterisk	Version 12.3.0 rc2
Digium Asterisk	Version 12.3.1
Digium Asterisk	Version 12.3.2
Digium Asterisk	Version 12.4.0
Digium Asterisk	Version 12.4.0 rc1
Digium Asterisk	Version 12.5.0
Digium Asterisk	Version 12.5.0 rc1
Digium Asterisk	Version 12.6.0
Digium Asterisk	Version 12.6.0 rc1
Digium Asterisk	Version 12.7.0
Digium Asterisk	Version 12.7.0 rc1
Digium Asterisk	Version 12.7.0 rc2
Digium Asterisk	Version 12.8.0
Digium Asterisk	Version 12.8.0 rc1
Digium Asterisk	Version 12.8.0 rc2
Digium Asterisk	Version 12.8.1
Digium Asterisk	Version 13.0.0
Digium Asterisk	Version 13.1.0
Digium Asterisk	Version 13.1.0 rc1
Digium Asterisk	Version 13.1.0 rc2
Digium Asterisk	Version 13.2.0
Digium Asterisk	Version 13.2.0 rc1