CVE-2025-54995
CVE-2025-54995 · Asterisk remotely exploitable leak of RTP UDP ports and internal resources
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
Esta página muestra una selección de datos de las fuentes. Consulte los avisos enlazados para ver la descripción completa y las versiones afectadas.
Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 18.26.4 and 18.9-cert17, RTP UDP ports and internal resources can leak due to a lack of session termination. This could result in leaks and resource exhaustion. This issue has been patched in versions 18.26.4 and 18.9-cert17.
CVSS 6.5 · Media · EPSS 0,5% · Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
asterisk
- Versiones
- < 18.26.4: Afectada
- < 18.9-cert17: Afectada
Sin corrección publicada
asterisk Debian:14
- Versiones
- 0.1.11-3
- 0.1.11-3woody1
- 1:1.0.5-2
- 1:1.0.5-4
- 1:1.0.6-1
- 1:1.0.6-2
- 1:1.0.7-1
- 1:1.0.7.dfsg.1-1
- 1:1.0.7.dfsg.1-2
- 1:1.0.7.dfsg.1-2sarge1
- 1:1.0.7.dfsg.1-2sarge2
- 1:1.0.7.dfsg.1-2sarge3
- 1:1.0.7.dfsg.1-2sarge4
- 1:1.0.7.dfsg.1-2sarge5
- 1:1.0.7.dfsg.1-2sarge6
- 1:1.0.9.dfsg-1
- 1:1.0.9.dfsg-3
- 1:1.0.9.dfsg-4
- 1:1.0.9.dfsg-5
- 1:1.0.9.dfsg-6
- 1:1.2.0-beta1.dfsg-1
- 1:1.2.0-beta2.dfsg-1
- 1:1.2.0-beta2.dfsg-2
- 1:1.2.0-beta2.dfsg-3
- 1:1.2.0-rc1.dfsg-1
- 1:1.2.0-rc2.dfsg-1
- 1:1.2.0.dfsg-1
- 1:1.2.0.dfsg-2
- 1:1.2.0.dfsg-3
- 1:1.2.0.dfsg-4
- 1:1.2.0.dfsg-5
- 1:1.2.0.dfsg-6
- 1:1.2.1.dfsg-1
- 1:1.2.1.dfsg-2
- 1:1.2.1.dfsg-3
- 1:1.2.10.dfsg-1
- 1:1.2.10.dfsg-1bpo1
- 1:1.2.10.dfsg-2
- 1:1.2.10.dfsg-3
- 1:1.2.11.dfsg-1
- 1:1.2.12.1.dfsg-1
- 1:1.2.13~dfsg-1
- 1:1.2.13~dfsg-2
- 1:1.2.13~dfsg-2etch1
- 1:1.2.13~dfsg-2etch2
- 1:1.2.13~dfsg-2etch3
- 1:1.2.13~dfsg-2etch4
- 1:1.2.14~dfsg-1
- 1:1.2.14~dfsg-2
- 1:1.2.14~dfsg-3
- 1:1.2.14~dfsg-4
- 1:1.2.15~dfsg-1
- 1:1.2.16~dfsg-1
- 1:1.2.17~dfsg-1
- 1:1.2.4.dfsg-1
- 1:1.2.4.dfsg-2
- 1:1.2.4.dfsg-3
- 1:1.2.4.dfsg-4
- 1:1.2.4.dfsg-5
- 1:1.2.4.dfsg-6
- 1:1.2.4.dfsg-6+b1
- 1:1.2.4.dfsg-7
- 1:1.2.7.1.dfsg-1
- 1:1.2.7.1.dfsg-2
- 1:1.2.7.1.dfsg-3
- 1:1.2.9.1.dfsg-1
- 1:1.4.10~dfsg-1
- 1:1.4.11~dfsg-1
- 1:1.4.11~dfsg-2
- 1:1.4.11~dfsg-3
- 1:1.4.11~dfsg-4
- 1:1.4.13~dfsg-1
- 1:1.4.15~dfsg-1
- 1:1.4.16.2~dfsg-1
- 1:1.4.16.2~dfsg-2
- 1:1.4.17~dfsg-1
- 1:1.4.17~dfsg-2
- 1:1.4.18.1~dfsg-1
- 1:1.4.18~dfsg-1
- 1:1.4.19.1~dfsg-1
- 1:1.4.20~dfsg-1
- 1:1.4.21.1~dfsg-1
- 1:1.4.21.2~dfsg-1
- 1:1.4.21.2~dfsg-2
- 1:1.4.21.2~dfsg-3
- 1:1.4.21.2~dfsg-3+lenny1
- 1:1.4.21.2~dfsg-3+lenny2
- 1:1.4.21.2~dfsg-3+lenny2.1
- 1:1.4.21.2~dfsg-3+lenny3
- 1:1.4.21.2~dfsg-3+lenny5
- 1:1.4.21.2~dfsg-3+lenny6
- 1:1.4.21.2~dfsg-3.1
- 1:1.4.2~dfsg-1
- 1:1.4.2~dfsg-2
- 1:1.4.2~dfsg-3
- 1:1.4.2~dfsg-4
- 1:1.4.2~dfsg-5
- 1:1.4.3~dfsg-1
- 1:1.4.4~dfsg-1
- 1:1.4.4~dfsg-2
- 1:1.4.4~dfsg-3
- 1:1.4.5~dfsg-1
- 1:1.4.6~dfsg-1
- 1:1.4.8~dfsg-1
- 1:1.4.8~dfsg-2
- 1:1.4.9~dfsg-1
- 1:1.6.1.0~dfsg-1
- 1:1.6.1.0~dfsg~rc3-1
- 1:1.6.2.0-1
- 1:1.6.2.0~dfsg~beta3-1
- 1:1.6.2.0~dfsg~rc1-1
- 1:1.6.2.0~rc3-1
- 1:1.6.2.0~rc3-2
- 1:1.6.2.0~rc6-1
- 1:1.6.2.0~rc7-1
- 1:1.6.2.2-1
- 1:1.6.2.6-1
- 1:1.6.2.7-1
- 1:1.6.2.9-1
- 1:1.6.2.9-1~bpo50+1
- 1:1.6.2.9-1~bpo50+2
- 1:1.6.2.9-1~bpo50+3
- 1:1.6.2.9-2
- 1:1.6.2.9-2+squeeze1
- 1:1.6.2.9-2+squeeze10
- 1:1.6.2.9-2+squeeze11
- 1:1.6.2.9-2+squeeze12
- 1:1.6.2.9-2+squeeze2
- 1:1.6.2.9-2+squeeze3
- 1:1.6.2.9-2+squeeze4
- 1:1.6.2.9-2+squeeze5
- 1:1.6.2.9-2+squeeze6
- 1:1.6.2.9-2+squeeze7
- 1:1.6.2.9-2+squeeze8
- 1:1.6.2.9-2+squeeze9
- 1:1.8.10.0~dfsg-1
- 1:1.8.10.1~dfsg-1
- 1:1.8.11.1~dfsg-1
- 1:1.8.13.0~dfsg-1
- 1:1.8.13.0~dfsg-1~bpo60+1
- 1:1.8.13.1~dfsg-1
- 1:1.8.13.1~dfsg-1+powerpcspe1
- 1:1.8.13.1~dfsg-1~bpo60+1
- 1:1.8.13.1~dfsg-2
- 1:1.8.13.1~dfsg-3
- 1:1.8.3.3-1
- 1:1.8.4-1
- 1:1.8.4.2-1
- 1:1.8.4.3-1
- 1:1.8.4.4~dfsg-1
- 1:1.8.4.4~dfsg-2
- 1:1.8.7.1~dfsg-1
- 1:1.8.7.1~dfsg-2
- 1:1.8.7.1~dfsg-3
- 1:1.8.8.0~dfsg-1
- 1:1.8.8.2~dfsg-1
- 1:11.10.0~dfsg-1
- 1:11.10.0~dfsg-1~bpo70+1
- 1:11.10.2~dfsg-1
- 1:11.10.2~dfsg-1~bpo70+1
- 1:11.11.0~dfsg-1
- 1:11.11.0~dfsg-1~bpo70+1
- 1:11.11.0~dfsg-2
- 1:11.12.0~dfsg-1
- 1:11.12.0~dfsg-1~bpo70+1
- 1:11.12.1~dfsg-1
- 1:11.13.0~dfsg-1
- 1:11.13.0~dfsg-1~bpo70+1
- 1:11.13.1~dfsg-1
- 1:11.13.1~dfsg-2
- 1:11.13.1~dfsg-2~bpo70+1
- 1:11.5.1~dfsg-1
- 1:11.5.1~dfsg-2
- 1:11.5.1~dfsg1-1
- 1:11.5.1~dfsg1-1~bpo70+1
- 1:11.6.0~dfsg-1
- 1:11.6.0~dfsg-2
- 1:11.6.0~dfsg-3
- 1:11.7.0~dfsg-1
- 1:11.7.0~dfsg-1+e1
- 1:11.7.0~dfsg-1~bpo70+1
- 1:11.8.0~dfsg-1
- 1:11.8.0~dfsg-2
- 1:11.8.1~dfsg-1
- 1:11.8.1~dfsg-1~bpo70+1
- 1:11.9.0~dfsg-1
- 1:11.9.0~dfsg-2
- 1:11.9.0~dfsg-2~bpo70+1
- 1:13.0.0~dfsg-1
- 1:13.0.0~dfsg-2
- 1:13.1.0~dfsg-1
- 1:13.1.0~dfsg-1.1
- 1:13.10.0~dfsg-1
- 1:13.11.2~dfsg-1
- 1:13.12.1~dfsg-1
- 1:13.12.2~dfsg-1
- 1:13.12.2~dfsg-2
- 1:13.13.1~dfsg-1
- 1:13.13.1~dfsg-2
- 1:13.13.1~dfsg-3
- 1:13.13.1~dfsg-3~exp1
- 1:13.13.1~dfsg-4
- 1:13.14.0~dfsg-1
- 1:13.14.0~dfsg-1~exp1
- 1:13.14.1~dfsg-1
- 1:13.14.1~dfsg-2
- 1:13.17.0~dfsg-1
- 1:13.17.0~dfsg-2
- 1:13.17.1~dfsg-1
- 1:13.17.2~dfsg-1
- 1:13.17.2~dfsg-2
- 1:13.18.1~dfsg-1
- 1:13.18.3~dfsg-1
- 1:13.18.5~dfsg-1
- 1:13.20.0~dfsg-1
- 1:13.22.0~dfsg-1
- 1:13.22.0~dfsg-2
- 1:13.23.1~dfsg-1
- 1:13.23.1~dfsg-2
- 1:13.7.2~dfsg-1
Actualiza a 1:22.2.0~dfsg+~cs6.15.60671435-1
asterisk Ubuntu:Pro:16.04:LTS
- Versiones
- 1:13.1.0~dfsg-1.1ubuntu3
- 1:13.1.0~dfsg-1.1ubuntu4
- 1:13.1.0~dfsg-1.1ubuntu4.1
- 1:13.1.0~dfsg-1.1ubuntu4.1+esm1
- Intervalos de versiones afectados
- ECOSYSTEM: (−∞, +∞)
Sin corrección publicada
asterisk Ubuntu:18.04:LTS
- Versiones
- 1:13.17.2~dfsg-1ubuntu1
- 1:13.17.2~dfsg-2ubuntu1
- 1:13.18.1~dfsg-1ubuntu1
- 1:13.18.3~dfsg-1ubuntu1
- 1:13.18.3~dfsg-1ubuntu2
- 1:13.18.3~dfsg-1ubuntu3
- 1:13.18.3~dfsg-1ubuntu4
- Intervalos de versiones afectados
- ECOSYSTEM: (−∞, +∞)
Sin corrección publicada
asterisk Ubuntu:20.04:LTS
- Versiones
- 1:16.2.1~dfsg-2build2
- 1:16.2.1~dfsg-2build3
- 1:16.2.1~dfsg-2ubuntu1
- Intervalos de versiones afectados
- ECOSYSTEM: (−∞, +∞)
Sin corrección publicada
asterisk Ubuntu:22.04:LTS
- Versiones
- 1:16.16.1~dfsg-2
- 1:16.16.1~dfsg-4
- 1:16.16.1~dfsg-4build1
- 1:16.16.1~dfsg+~2.10-1
- 1:18.10.0~dfsg+~cs6.10.40431411-2
- Intervalos de versiones afectados
- ECOSYSTEM: (−∞, +∞)
Sin corrección publicada
asterisk Ubuntu:24.04:LTS
- Versiones
- 1:20.4.0~dfsg+~cs6.13.40431414-2
- 1:20.5.0~dfsg+~cs6.13.40431414-1
- 1:20.5.1~dfsg+~cs6.13.40431414-1
- 1:20.5.2~dfsg+~cs6.13.40431414-1
- 1:20.6.0~dfsg+~cs6.13.40431414-1
- 1:20.6.0~dfsg+~cs6.13.40431414-2
- 1:20.6.0~dfsg+~cs6.13.40431414-2build3
- 1:20.6.0~dfsg+~cs6.13.40431414-2build4
- 1:20.6.0~dfsg+~cs6.13.40431414-2build5
- Intervalos de versiones afectados
- ECOSYSTEM: (−∞, +∞)
Sin corrección publicada
Fuentes originales
- https://github.com/asterisk/asterisk/security/advisories/GHSA-557q-795j-wfx2
- https://github.com/asterisk/asterisk/pull/1405
- https://github.com/asterisk/asterisk/pull/1406
- https://github.com/asterisk/asterisk/commit/0278f5bde14565c6838a6ec39bc21aee0cde56a9
- https://github.com/asterisk/asterisk/commit/eafcd7a451dcd007dddf324ac37dd55a4808338d
- https://lists.debian.org/debian-lts-announce/2025/10/msg00006.html
- https://nvd.nist.gov/vuln/detail/CVE-2025-54995