CVE-2019-12827

Published: Jul 12, 2019Modified: Nov 21, 2024

6.5

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

Buffer overflow in res_pjsip_messaging in Digium Asterisk versions 13.21-cert3, 13.27.0, 15.7.2, 16.4.0 and earlier allows remote authenticated users to crash Asterisk by sending a specially crafted SIP MESSAGE message.

Affected (8)

Products: Digium: Asterisk, Certified Asterisk

Digium

2 products

Asterisk

Certified Asterisk

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Digium Asterisk	From 13.0.0 to 13.27.0
Digium Asterisk	From 15.0.0 to 15.7.2
Digium Asterisk	From 16.0.0 to 16.4.0
Digium Certified Asterisk	Version 13.21 cert1-rc1
Digium Certified Asterisk	Version 13.21 cert1-rc2
Digium Certified Asterisk	Version 13.21 cert1
Digium Certified Asterisk	Version 13.21 cert2
Digium Certified Asterisk	Version 13.21 cert3