CVE-2021-26906

An issue was discovered in res_pjsip_session.c in Digium Asterisk through 13.38.1; 14.x, 15.x, and 16.x through 16.16.0; 17.x through 17.9.1; and 18.x through…

published February 18, 2021

CVSS
—
EPSS
3%
Percentile
84.9
In the wild
Unconfirmed
What it is

An issue was discovered in res_pjsip_session.c in Digium Asterisk through 13.38.1; 14.x, 15.x, and 16.x through 16.16.0; 17.x through 17.9.1; and 18.x through 18.2.0, and Certified Asterisk through 16.8-cert5. An SDP negotiation vulnerability in PJSIP allows a remote server to potentially crash Asterisk by sending specific SIP responses that cause an SDP negotiation failure.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02547 · 84.9th percentile
Published
2021-02-18T19:50Z
EPSS history
Timeline
  • 18 FEB 19:50Z
    An issue was discovered in res_pjsip_session.c in Digium Asterisk through 13.38.1; 14.x, 15.x, and 16.x through 16.16.0; 17.x through 17.9.1; and 18.x through…
    cvelistv5