Asterisk is an open source private branch exchange and telephony toolkit. In Asterisk versions 18.20.0 and prior, 20.5.0 and prior, and 21.0.0; as well as ceritifed-asterisk 18.9-cert5 and prior, the 'update' functionality of the PJSIP_HEADER dialplan function can exceed the available buffer space for storing the new value of a header. By doing so this can overwrite memory or cause a crash. This is not externally exploitable, unless dialplan is explicitly written to update a header based on data from an outside source. If the 'update' functionality is not used the vulnerability does not occur. A patch is available at commit a1ca0268254374b515fa5992f01340f7717113fa.
{ "binaries": [ { "binary_name": "asterisk", "binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1" }, { "binary_name": "asterisk-config", "binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1" }, { "binary_name": "asterisk-dahdi", "binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1" }, { "binary_name": "asterisk-dev", "binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1" }, { "binary_name": "asterisk-mobile", "binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1" }, { "binary_name": "asterisk-modules", "binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1" }, { "binary_name": "asterisk-mp3", "binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1" }, { "binary_name": "asterisk-mysql", "binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1" }, { "binary_name": "asterisk-ooh323", "binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1" }, { "binary_name": "asterisk-voicemail", "binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1" }, { "binary_name": "asterisk-voicemail-imapstorage", "binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1" }, { "binary_name": "asterisk-voicemail-odbcstorage", "binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1" }, { "binary_name": "asterisk-vpb", "binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1" } ] }
{ "binaries": [ { "binary_name": "asterisk", "binary_version": "1:13.18.3~dfsg-1ubuntu4" }, { "binary_name": "asterisk-config", "binary_version": "1:13.18.3~dfsg-1ubuntu4" }, { "binary_name": "asterisk-dahdi", "binary_version": "1:13.18.3~dfsg-1ubuntu4" }, { "binary_name": "asterisk-dev", "binary_version": "1:13.18.3~dfsg-1ubuntu4" }, { "binary_name": "asterisk-mobile", "binary_version": "1:13.18.3~dfsg-1ubuntu4" }, { "binary_name": "asterisk-modules", "binary_version": "1:13.18.3~dfsg-1ubuntu4" }, { "binary_name": "asterisk-mp3", "binary_version": "1:13.18.3~dfsg-1ubuntu4" }, { "binary_name": "asterisk-mysql", "binary_version": "1:13.18.3~dfsg-1ubuntu4" }, { "binary_name": "asterisk-ooh323", "binary_version": "1:13.18.3~dfsg-1ubuntu4" }, { "binary_name": "asterisk-tests", "binary_version": "1:13.18.3~dfsg-1ubuntu4" }, { "binary_name": "asterisk-voicemail", "binary_version": "1:13.18.3~dfsg-1ubuntu4" }, { "binary_name": "asterisk-voicemail-imapstorage", "binary_version": "1:13.18.3~dfsg-1ubuntu4" }, { "binary_name": "asterisk-voicemail-odbcstorage", "binary_version": "1:13.18.3~dfsg-1ubuntu4" }, { "binary_name": "asterisk-vpb", "binary_version": "1:13.18.3~dfsg-1ubuntu4" } ] }
{ "binaries": [ { "binary_name": "asterisk", "binary_version": "1:16.2.1~dfsg-2ubuntu1" }, { "binary_name": "asterisk-config", "binary_version": "1:16.2.1~dfsg-2ubuntu1" }, { "binary_name": "asterisk-dahdi", "binary_version": "1:16.2.1~dfsg-2ubuntu1" }, { "binary_name": "asterisk-dev", "binary_version": "1:16.2.1~dfsg-2ubuntu1" }, { "binary_name": "asterisk-mobile", "binary_version": "1:16.2.1~dfsg-2ubuntu1" }, { "binary_name": "asterisk-modules", "binary_version": "1:16.2.1~dfsg-2ubuntu1" }, { "binary_name": "asterisk-mp3", "binary_version": "1:16.2.1~dfsg-2ubuntu1" }, { "binary_name": "asterisk-mysql", "binary_version": "1:16.2.1~dfsg-2ubuntu1" }, { "binary_name": "asterisk-ooh323", "binary_version": "1:16.2.1~dfsg-2ubuntu1" }, { "binary_name": "asterisk-tests", "binary_version": "1:16.2.1~dfsg-2ubuntu1" }, { "binary_name": "asterisk-voicemail", "binary_version": "1:16.2.1~dfsg-2ubuntu1" }, { "binary_name": "asterisk-voicemail-imapstorage", "binary_version": "1:16.2.1~dfsg-2ubuntu1" }, { "binary_name": "asterisk-voicemail-odbcstorage", "binary_version": "1:16.2.1~dfsg-2ubuntu1" }, { "binary_name": "asterisk-vpb", "binary_version": "1:16.2.1~dfsg-2ubuntu1" } ] }
{ "binaries": [ { "binary_name": "asterisk", "binary_version": "1:18.10.0~dfsg+~cs6.10.40431411-2" }, { "binary_name": "asterisk-config", "binary_version": "1:18.10.0~dfsg+~cs6.10.40431411-2" }, { "binary_name": "asterisk-dahdi", "binary_version": "1:18.10.0~dfsg+~cs6.10.40431411-2" }, { "binary_name": "asterisk-dev", "binary_version": "1:18.10.0~dfsg+~cs6.10.40431411-2" }, { "binary_name": "asterisk-mobile", "binary_version": "1:18.10.0~dfsg+~cs6.10.40431411-2" }, { "binary_name": "asterisk-modules", "binary_version": "1:18.10.0~dfsg+~cs6.10.40431411-2" }, { "binary_name": "asterisk-mp3", "binary_version": "1:18.10.0~dfsg+~cs6.10.40431411-2" }, { "binary_name": "asterisk-mysql", "binary_version": "1:18.10.0~dfsg+~cs6.10.40431411-2" }, { "binary_name": "asterisk-ooh323", "binary_version": "1:18.10.0~dfsg+~cs6.10.40431411-2" }, { "binary_name": "asterisk-tests", "binary_version": "1:18.10.0~dfsg+~cs6.10.40431411-2" }, { "binary_name": "asterisk-vpb", "binary_version": "1:18.10.0~dfsg+~cs6.10.40431411-2" } ] }
{ "binaries": [ { "binary_name": "asterisk", "binary_version": "1:20.6.0~dfsg+~cs6.13.40431414-2build5" }, { "binary_name": "asterisk-config", "binary_version": "1:20.6.0~dfsg+~cs6.13.40431414-2build5" }, { "binary_name": "asterisk-dahdi", "binary_version": "1:20.6.0~dfsg+~cs6.13.40431414-2build5" }, { "binary_name": "asterisk-dev", "binary_version": "1:20.6.0~dfsg+~cs6.13.40431414-2build5" }, { "binary_name": "asterisk-mobile", "binary_version": "1:20.6.0~dfsg+~cs6.13.40431414-2build5" }, { "binary_name": "asterisk-modules", "binary_version": "1:20.6.0~dfsg+~cs6.13.40431414-2build5" }, { "binary_name": "asterisk-mp3", "binary_version": "1:20.6.0~dfsg+~cs6.13.40431414-2build5" }, { "binary_name": "asterisk-mysql", "binary_version": "1:20.6.0~dfsg+~cs6.13.40431414-2build5" }, { "binary_name": "asterisk-ooh323", "binary_version": "1:20.6.0~dfsg+~cs6.13.40431414-2build5" }, { "binary_name": "asterisk-tests", "binary_version": "1:20.6.0~dfsg+~cs6.13.40431414-2build5" } ] }
{ "binaries": [ { "binary_name": "asterisk", "binary_version": "1:22.2.0~dfsg+~cs6.15.60671435-2" }, { "binary_name": "asterisk-config", "binary_version": "1:22.2.0~dfsg+~cs6.15.60671435-2" }, { "binary_name": "asterisk-dahdi", "binary_version": "1:22.2.0~dfsg+~cs6.15.60671435-2" }, { "binary_name": "asterisk-dev", "binary_version": "1:22.2.0~dfsg+~cs6.15.60671435-2" }, { "binary_name": "asterisk-mobile", "binary_version": "1:22.2.0~dfsg+~cs6.15.60671435-2" }, { "binary_name": "asterisk-modules", "binary_version": "1:22.2.0~dfsg+~cs6.15.60671435-2" }, { "binary_name": "asterisk-mp3", "binary_version": "1:22.2.0~dfsg+~cs6.15.60671435-2" }, { "binary_name": "asterisk-mysql", "binary_version": "1:22.2.0~dfsg+~cs6.15.60671435-2" }, { "binary_name": "asterisk-ooh323", "binary_version": "1:22.2.0~dfsg+~cs6.15.60671435-2" }, { "binary_name": "asterisk-tests", "binary_version": "1:22.2.0~dfsg+~cs6.15.60671435-2" } ] }