DEBIAN-CVE-2026-57184

See a problem?
Please try reporting it to the source first.

Source

https://security-tracker.debian.org/tracker/CVE-2026-57184

Import Source

https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-57184.json

JSON Data

https://api.osv.dev/v1/vulns/DEBIAN-CVE-2026-57184

Upstream

CVE-2026-57184

Published

2026-10-26T20:17:56Z

Modified

2026-10-27T17:00:07Z

Severity

6.3 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X CVSS Calculator

Summary

[none]

Details

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, insufficient bounds checking in the chan_ooh323 Q.931 information-element parser permits an out-of-bounds read that may allow an unauthenticated attacker to crash Asterisk using carefully crafted setup packets. The chan_ooh323 addon channel driver must be explicitly compiled and installed, which is not the default, and its port must be publicly reachable. This issue is fixed in Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3.

References

https://security-tracker.debian.org/tracker/CVE-2026-57184

Affected packages

Debian:14 / asterisk

Package

Name: asterisk
Purl: pkg:deb/debian/asterisk?arch=source&distro=forky

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1:22.10.1+dfsg+~cs6.17.60671434-1

Affected versions

0.*

0.1.11-3

0.1.11-3woody1

1:1.*

1:1.0.5-2

1:1.0.5-4

1:1.0.6-1

1:1.0.6-2

1:1.0.7-1

1:1.0.7.dfsg.1-1

1:1.0.7.dfsg.1-2

1:1.0.7.dfsg.1-2sarge1

1:1.0.7.dfsg.1-2sarge2

1:1.0.7.dfsg.1-2sarge3

1:1.0.7.dfsg.1-2sarge4

1:1.0.7.dfsg.1-2sarge5

1:1.0.7.dfsg.1-2sarge6

1:1.0.9.dfsg-1

1:1.0.9.dfsg-3

1:1.0.9.dfsg-4

1:1.0.9.dfsg-5

1:1.0.9.dfsg-6

1:1.2.0-beta1.dfsg-1

1:1.2.0-beta2.dfsg-1

1:1.2.0-beta2.dfsg-2

1:1.2.0-beta2.dfsg-3

1:1.2.0-rc1.dfsg-1

1:1.2.0-rc2.dfsg-1

1:1.2.0.dfsg-1

1:1.2.0.dfsg-2

1:1.2.0.dfsg-3

1:1.2.0.dfsg-4

1:1.2.0.dfsg-5

1:1.2.0.dfsg-6

1:1.2.1.dfsg-1

1:1.2.1.dfsg-2

1:1.2.1.dfsg-3

1:1.2.4.dfsg-1

1:1.2.4.dfsg-2

1:1.2.4.dfsg-3

1:1.2.4.dfsg-4

1:1.2.4.dfsg-5

1:1.2.4.dfsg-6

1:1.2.4.dfsg-6+b1

1:1.2.4.dfsg-7

1:1.2.7.1.dfsg-1

1:1.2.7.1.dfsg-2

1:1.2.7.1.dfsg-3

1:1.2.9.1.dfsg-1

1:1.2.10.dfsg-1

1:1.2.10.dfsg-1bpo1

1:1.2.10.dfsg-2

1:1.2.10.dfsg-3

1:1.2.11.dfsg-1

1:1.2.12.1.dfsg-1

1:1.2.13~dfsg-1

1:1.2.13~dfsg-2

1:1.2.13~dfsg-2etch1

1:1.2.13~dfsg-2etch2

1:1.2.13~dfsg-2etch3

1:1.2.13~dfsg-2etch4

1:1.2.14~dfsg-1

1:1.2.14~dfsg-2

1:1.2.14~dfsg-3

1:1.2.14~dfsg-4

1:1.2.15~dfsg-1

1:1.2.16~dfsg-1

1:1.2.17~dfsg-1

1:1.4.2~dfsg-1

1:1.4.2~dfsg-2

1:1.4.2~dfsg-3

1:1.4.2~dfsg-4

1:1.4.2~dfsg-5

1:1.4.3~dfsg-1

1:1.4.4~dfsg-1

1:1.4.4~dfsg-2

1:1.4.4~dfsg-3

1:1.4.5~dfsg-1

1:1.4.6~dfsg-1

1:1.4.8~dfsg-1

1:1.4.8~dfsg-2

1:1.4.9~dfsg-1

1:1.4.10~dfsg-1

1:1.4.11~dfsg-1

1:1.4.11~dfsg-2

1:1.4.11~dfsg-3

1:1.4.11~dfsg-4

1:1.4.13~dfsg-1

1:1.4.15~dfsg-1

1:1.4.16.2~dfsg-1

1:1.4.16.2~dfsg-2

1:1.4.17~dfsg-1

1:1.4.17~dfsg-2

1:1.4.18~dfsg-1

1:1.4.18.1~dfsg-1

1:1.4.19.1~dfsg-1

1:1.4.20~dfsg-1

1:1.4.21.1~dfsg-1

1:1.4.21.2~dfsg-1

1:1.4.21.2~dfsg-2

1:1.4.21.2~dfsg-3

1:1.4.21.2~dfsg-3+lenny1

1:1.4.21.2~dfsg-3+lenny2

1:1.4.21.2~dfsg-3+lenny2.1

1:1.4.21.2~dfsg-3+lenny3

1:1.4.21.2~dfsg-3+lenny5

1:1.4.21.2~dfsg-3+lenny6

1:1.4.21.2~dfsg-3.1

1:1.6.1.0~dfsg~rc3-1

1:1.6.1.0~dfsg-1

1:1.6.2.0~dfsg~beta3-1

1:1.6.2.0~dfsg~rc1-1

1:1.6.2.0~rc3-1

1:1.6.2.0~rc3-2

1:1.6.2.0~rc6-1

1:1.6.2.0~rc7-1

1:1.6.2.0-1

1:1.6.2.2-1

1:1.6.2.6-1

1:1.6.2.7-1

1:1.6.2.9-1~bpo50+1

1:1.6.2.9-1~bpo50+2

1:1.6.2.9-1~bpo50+3

1:1.6.2.9-1

1:1.6.2.9-2

1:1.6.2.9-2+squeeze1

1:1.6.2.9-2+squeeze2

1:1.6.2.9-2+squeeze3

1:1.6.2.9-2+squeeze4

1:1.6.2.9-2+squeeze5

1:1.6.2.9-2+squeeze6

1:1.6.2.9-2+squeeze7

1:1.6.2.9-2+squeeze8

1:1.6.2.9-2+squeeze9

1:1.6.2.9-2+squeeze10

1:1.6.2.9-2+squeeze11

1:1.6.2.9-2+squeeze12

1:1.8.3.3-1

1:1.8.4-1

1:1.8.4.2-1

1:1.8.4.3-1

1:1.8.4.4~dfsg-1

1:1.8.4.4~dfsg-2

1:1.8.7.1~dfsg-1

1:1.8.7.1~dfsg-2

1:1.8.7.1~dfsg-3

1:1.8.8.0~dfsg-1

1:1.8.8.2~dfsg-1

1:1.8.10.0~dfsg-1

1:1.8.10.1~dfsg-1

1:1.8.11.1~dfsg-1

1:1.8.13.0~dfsg-1~bpo60+1

1:1.8.13.0~dfsg-1

1:1.8.13.1~dfsg-1~bpo60+1

1:1.8.13.1~dfsg-1

1:1.8.13.1~dfsg-1+powerpcspe1

1:1.8.13.1~dfsg-2

1:1.8.13.1~dfsg-3

1:11.*

1:11.5.1~dfsg-1

1:11.5.1~dfsg-2

1:11.5.1~dfsg1-1~bpo70+1

1:11.5.1~dfsg1-1

1:11.6.0~dfsg-1

1:11.6.0~dfsg-2

1:11.6.0~dfsg-3

1:11.7.0~dfsg-1~bpo70+1

1:11.7.0~dfsg-1

1:11.7.0~dfsg-1+e1

1:11.8.0~dfsg-1

1:11.8.0~dfsg-2

1:11.8.1~dfsg-1~bpo70+1

1:11.8.1~dfsg-1

1:11.9.0~dfsg-1

1:11.9.0~dfsg-2~bpo70+1

1:11.9.0~dfsg-2

1:11.10.0~dfsg-1~bpo70+1

1:11.10.0~dfsg-1

1:11.10.2~dfsg-1~bpo70+1

1:11.10.2~dfsg-1

1:11.11.0~dfsg-1~bpo70+1

1:11.11.0~dfsg-1

1:11.11.0~dfsg-2

1:11.12.0~dfsg-1~bpo70+1

1:11.12.0~dfsg-1

1:11.12.1~dfsg-1

1:11.13.0~dfsg-1~bpo70+1

1:11.13.0~dfsg-1

1:11.13.1~dfsg-1

1:11.13.1~dfsg-2~bpo70+1

1:11.13.1~dfsg-2

1:13.*

1:13.0.0~dfsg-1

1:13.0.0~dfsg-2

1:13.1.0~dfsg-1

1:13.1.0~dfsg-1.1

1:13.7.2~dfsg-1

1:13.8.0~dfsg-1

1:13.8.2~dfsg-1

1:13.9.1~dfsg-1

1:13.9.1~dfsg-2

1:13.10.0~dfsg-1

1:13.11.2~dfsg-1

1:13.12.1~dfsg-1

1:13.12.2~dfsg-1

1:13.12.2~dfsg-2

1:13.13.1~dfsg-1

1:13.13.1~dfsg-2

1:13.13.1~dfsg-3~exp1

1:13.13.1~dfsg-3

1:13.13.1~dfsg-4

1:13.14.0~dfsg-1~exp1

1:13.14.0~dfsg-1

1:13.14.1~dfsg-1

1:13.14.1~dfsg-2

1:13.17.0~dfsg-1

1:13.17.0~dfsg-2

1:13.17.1~dfsg-1

1:13.17.2~dfsg-1

1:13.17.2~dfsg-2

1:13.18.1~dfsg-1

1:13.18.3~dfsg-1

1:13.18.5~dfsg-1

1:13.20.0~dfsg-1

1:13.22.0~dfsg-1

1:13.22.0~dfsg-2

1:13.23.1~dfsg-1

1:13.23.1~dfsg-2

1:16.*

1:16.1.0~dfsg-1

1:16.1.0~dfsg-2

1:16.1.0~dfsg-3

1:16.1.0~dfsg-4

1:16.1.1~dfsg-1

1:16.2.0~dfsg-1

1:16.2.1~dfsg-1

1:16.2.1~dfsg-2

1:16.10.0~dfsg-1

1:16.12.0~dfsg-1

1:16.15.0~dfsg-1

1:16.15.1~dfsg-1

1:16.16.1~dfsg-1~bpo10+1

1:16.16.1~dfsg-1

1:16.16.1~dfsg-2

1:16.16.1~dfsg-3

1:16.16.1~dfsg-4

1:16.16.1~dfsg+~2.10-1

1:16.16.1~dfsg+~2.10-2

1:16.23.0~dfsg+~2.10-1

1:16.23.0~dfsg+~cs6.10.20220309-1

1:16.23.0~dfsg+~cs6.10.20220309-2

1:16.23.0~dfsg+~cs6.10.40431411-1

1:18.*

1:18.9.0~dfsg+~cs6.10.40431411-1

1:18.10.0~dfsg+~cs6.10.40431411-1

1:18.10.0~dfsg+~cs6.10.40431411-2

1:18.10.1~dfsg+~cs6.10.40431411-1

1:18.11.1~dfsg+~cs6.10.40431413-1

1:18.11.2~dfsg+~cs6.10.40431413-1

1:18.12.0~dfsg+~cs6.12.40431413-1

1:18.14.0~~rc1~dfsg+~cs6.12.40431414-1

1:18.14.0~dfsg+~cs6.12.40431414-1

1:20.*

1:20.0.0~~rc1~dfsg+~cs6.12.40431414-1

1:20.0.0~~rc2~dfsg+~cs6.12.40431414-1

1:20.0.0~dfsg+~cs6.12.40431414-1

1:20.0.0~dfsg+~cs6.12.40431414-2

1:20.0.1~dfsg+~cs6.12.40431414-1

1:20.1.0~~rc2~dfsg+~cs6.12.40431414-1

1:20.1.0~dfsg+~cs6.12.40431414-1

1:20.2.1~dfsg+~cs6.13.40431413-1

1:20.3.0~dfsg+~cs6.13.40431413-1

1:20.4.0~dfsg+~cs6.13.40431414-1

1:20.4.0~dfsg+~cs6.13.40431414-2

1:20.5.0~dfsg+~cs6.13.40431414-1

1:20.5.1~dfsg+~cs6.13.40431414-1

1:20.5.2~dfsg+~cs6.13.40431414-1

1:20.6.0~dfsg+~cs6.13.40431414-1

1:20.6.0~dfsg+~cs6.13.40431414-2

1:20.8.1~dfsg+~cs6.14.40431414-1

1:20.9.3~dfsg+~cs6.14.60671435-1

1:22.*

1:22.0.0~~rc2~dfsg+~cs6.14.60671435-1

1:22.0.0~dfsg+~cs6.14.60671435-1

1:22.1.0~dfsg+~cs6.14.60671435-1

1:22.1.1~dfsg+~cs6.14.60671435-1

1:22.2.0~dfsg+~cs6.15.60671435-1

1:22.2.0~dfsg+~cs6.15.60671435-2

1:22.3.0~~rc1~dfsg+~cs6.15.60671435-1

1:22.3.0~dfsg+~cs6.15.60671435-1

1:22.4.1~dfsg+~cs6.15.60671435-1

1:22.4.1~dfsg+~cs6.15.60671435-2

1:22.5.1~dfsg+~cs6.15.60671435-1

1:22.5.2~dfsg+~cs6.15.60671435-1

1:22.6.0~dfsg+~cs6.15.60671435-1

1:22.7.0~dfsg+~cs6.15.60671435-1

1:22.8.0+dfsg+~cs6.15.60671435-1

1:22.8.2+dfsg+~cs6.15.60671435-1

1:22.9.0+dfsg+~cs6.16.60671434-1

1:22.10.0+dfsg+~cs6.17.60671434-1

1:22.10.0+dfsg+~cs6.17.60671434-2

1:22.10.0+dfsg+~cs6.17.60671434-3

Ecosystem specific

{
    "urgency":  "not yet assigned"
}

Database specific

source

"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-57184.json"