Remote code execution can occur in Asterisk Open Source 13.x before 13.14.1 and 14.x before 14.3.1 and Certified Asterisk 13.13 before 13.13-cert3 because of a buffer overflow in a CDR user field, related to X-ClientCode in chan_sip, the CDR dialplan function, and the AMI Monitor action.
{ "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro", "ubuntu_priority": "medium", "binaries": [ { "binary_name": "asterisk", "binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1" }, { "binary_name": "asterisk-config", "binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1" }, { "binary_name": "asterisk-dahdi", "binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1" }, { "binary_name": "asterisk-dahdi-dbgsym", "binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1" }, { "binary_name": "asterisk-dbg", "binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1" }, { "binary_name": "asterisk-dbgsym", "binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1" }, { "binary_name": "asterisk-dev", "binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1" }, { "binary_name": "asterisk-doc", "binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1" }, { "binary_name": "asterisk-mobile", "binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1" }, { "binary_name": "asterisk-mobile-dbgsym", "binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1" }, { "binary_name": "asterisk-modules", "binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1" }, { "binary_name": "asterisk-modules-dbgsym", "binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1" }, { "binary_name": "asterisk-mp3", "binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1" }, { "binary_name": "asterisk-mp3-dbgsym", "binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1" }, { "binary_name": "asterisk-mysql", "binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1" }, { "binary_name": "asterisk-mysql-dbgsym", "binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1" }, { "binary_name": "asterisk-ooh323", "binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1" }, { "binary_name": "asterisk-ooh323-dbgsym", "binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1" }, { "binary_name": "asterisk-voicemail", "binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1" }, { "binary_name": "asterisk-voicemail-dbgsym", "binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1" }, { "binary_name": "asterisk-voicemail-imapstorage", "binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1" }, { "binary_name": "asterisk-voicemail-imapstorage-dbgsym", "binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1" }, { "binary_name": "asterisk-voicemail-odbcstorage", "binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1" }, { "binary_name": "asterisk-voicemail-odbcstorage-dbgsym", "binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1" }, { "binary_name": "asterisk-vpb", "binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1" }, { "binary_name": "asterisk-vpb-dbgsym", "binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_name": "asterisk", "binary_version": "1:13.18.3~dfsg-1ubuntu4" }, { "binary_name": "asterisk-config", "binary_version": "1:13.18.3~dfsg-1ubuntu4" }, { "binary_name": "asterisk-dahdi", "binary_version": "1:13.18.3~dfsg-1ubuntu4" }, { "binary_name": "asterisk-dahdi-dbgsym", "binary_version": "1:13.18.3~dfsg-1ubuntu4" }, { "binary_name": "asterisk-dbgsym", "binary_version": "1:13.18.3~dfsg-1ubuntu4" }, { "binary_name": "asterisk-dev", "binary_version": "1:13.18.3~dfsg-1ubuntu4" }, { "binary_name": "asterisk-doc", "binary_version": "1:13.18.3~dfsg-1ubuntu4" }, { "binary_name": "asterisk-mobile", "binary_version": "1:13.18.3~dfsg-1ubuntu4" }, { "binary_name": "asterisk-mobile-dbgsym", "binary_version": "1:13.18.3~dfsg-1ubuntu4" }, { "binary_name": "asterisk-modules", "binary_version": "1:13.18.3~dfsg-1ubuntu4" }, { "binary_name": "asterisk-modules-dbgsym", "binary_version": "1:13.18.3~dfsg-1ubuntu4" }, { "binary_name": "asterisk-mp3", "binary_version": "1:13.18.3~dfsg-1ubuntu4" }, { "binary_name": "asterisk-mp3-dbgsym", "binary_version": "1:13.18.3~dfsg-1ubuntu4" }, { "binary_name": "asterisk-mysql", "binary_version": "1:13.18.3~dfsg-1ubuntu4" }, { "binary_name": "asterisk-mysql-dbgsym", "binary_version": "1:13.18.3~dfsg-1ubuntu4" }, { "binary_name": "asterisk-ooh323", "binary_version": "1:13.18.3~dfsg-1ubuntu4" }, { "binary_name": "asterisk-ooh323-dbgsym", "binary_version": "1:13.18.3~dfsg-1ubuntu4" }, { "binary_name": "asterisk-tests", "binary_version": "1:13.18.3~dfsg-1ubuntu4" }, { "binary_name": "asterisk-tests-dbgsym", "binary_version": "1:13.18.3~dfsg-1ubuntu4" }, { "binary_name": "asterisk-voicemail", "binary_version": "1:13.18.3~dfsg-1ubuntu4" }, { "binary_name": "asterisk-voicemail-dbgsym", "binary_version": "1:13.18.3~dfsg-1ubuntu4" }, { "binary_name": "asterisk-voicemail-imapstorage", "binary_version": "1:13.18.3~dfsg-1ubuntu4" }, { "binary_name": "asterisk-voicemail-imapstorage-dbgsym", "binary_version": "1:13.18.3~dfsg-1ubuntu4" }, { "binary_name": "asterisk-voicemail-odbcstorage", "binary_version": "1:13.18.3~dfsg-1ubuntu4" }, { "binary_name": "asterisk-voicemail-odbcstorage-dbgsym", "binary_version": "1:13.18.3~dfsg-1ubuntu4" }, { "binary_name": "asterisk-vpb", "binary_version": "1:13.18.3~dfsg-1ubuntu4" }, { "binary_name": "asterisk-vpb-dbgsym", "binary_version": "1:13.18.3~dfsg-1ubuntu4" } ] }