CVE-2021-26712

Incorrect access controls in res_srtp.c in Sangoma Asterisk 13.38.1, 16.16.0, 17.9.1, and 18.2.0 and Certified Asterisk 16.8-cert5 allow a remote…

published February 18, 2021

CVSS
—
EPSS
4%
Percentile
89.5
In the wild
Unconfirmed
What it is

Incorrect access controls in res_srtp.c in Sangoma Asterisk 13.38.1, 16.16.0, 17.9.1, and 18.2.0 and Certified Asterisk 16.8-cert5 allow a remote unauthenticated attacker to prematurely terminate secure calls by replaying SRTP packets.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03632 · 89.5th percentile
Published
2021-02-18T20:10Z
EPSS history
Timeline
  • 18 FEB 20:10Z
    Incorrect access controls in res_srtp.c in Sangoma Asterisk 13.38.1, 16.16.0, 17.9.1, and 18.2.0 and Certified Asterisk 16.8-cert5 allow a remote…
    cvelistv5