CVE-2021-26713

A stack-based buffer overflow in res_rtp_asterisk.c in Sangoma Asterisk before 16.16.1, 17.x before 17.9.2, and 18.x before 18.2.1 and Certified Asterisk…

published February 19, 2021

CVSS
—
EPSS
2%
Percentile
79.2
In the wild
Unconfirmed
What it is

A stack-based buffer overflow in res_rtp_asterisk.c in Sangoma Asterisk before 16.16.1, 17.x before 17.9.2, and 18.x before 18.2.1 and Certified Asterisk before 16.8-cert6 allows an authenticated WebRTC client to cause an Asterisk crash by sending multiple hold/unhold requests in quick succession. This is caused by a signedness comparison mismatch.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01868 · 79.2th percentile
Published
2021-02-19T19:30Z
EPSS history
Timeline
  • 19 FEB 19:30Z
    A stack-based buffer overflow in res_rtp_asterisk.c in Sangoma Asterisk before 16.16.1, 17.x before 17.9.2, and 18.x before 18.2.1 and Certified Asterisk…
    cvelistv5