CVE-2021-32558
CVE-2021-32558
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
Cette page présente une partie des faits des sources. Consultez les avis liés pour la description complète et les versions concernées.
An issue was discovered in Sangoma Asterisk 13.x before 13.38.3, 16.x before 16.19.1, 17.x before 17.9.4, and 18.x before 18.5.1, and Certified Asterisk before 16.8-cert10. If the IAX2 channel driver receives a packet that contains an unsupported media format, a crash can occur.
CVSS 7.5 · Élevée · EPSS 9,2% · Correctif disponible
- Publication
- Mise à jour
Pile logicielle: system
Produits et versions concernés
n/a
- Versions du logiciel
- n/a: Concernée
Aucun correctif publié
asterisk Debian:14
- Versions du logiciel
- 0.1.11-3
- 0.1.11-3woody1
- 1:1.0.5-2
- 1:1.0.5-4
- 1:1.0.6-1
- 1:1.0.6-2
- 1:1.0.7-1
- 1:1.0.7.dfsg.1-1
- 1:1.0.7.dfsg.1-2
- 1:1.0.7.dfsg.1-2sarge1
- 1:1.0.7.dfsg.1-2sarge2
- 1:1.0.7.dfsg.1-2sarge3
- 1:1.0.7.dfsg.1-2sarge4
- 1:1.0.7.dfsg.1-2sarge5
- 1:1.0.7.dfsg.1-2sarge6
- 1:1.0.9.dfsg-1
- 1:1.0.9.dfsg-3
- 1:1.0.9.dfsg-4
- 1:1.0.9.dfsg-5
- 1:1.0.9.dfsg-6
- 1:1.2.0-beta1.dfsg-1
- 1:1.2.0-beta2.dfsg-1
- 1:1.2.0-beta2.dfsg-2
- 1:1.2.0-beta2.dfsg-3
- 1:1.2.0-rc1.dfsg-1
- 1:1.2.0-rc2.dfsg-1
- 1:1.2.0.dfsg-1
- 1:1.2.0.dfsg-2
- 1:1.2.0.dfsg-3
- 1:1.2.0.dfsg-4
- 1:1.2.0.dfsg-5
- 1:1.2.0.dfsg-6
- 1:1.2.1.dfsg-1
- 1:1.2.1.dfsg-2
- 1:1.2.1.dfsg-3
- 1:1.2.10.dfsg-1
- 1:1.2.10.dfsg-1bpo1
- 1:1.2.10.dfsg-2
- 1:1.2.10.dfsg-3
- 1:1.2.11.dfsg-1
- 1:1.2.12.1.dfsg-1
- 1:1.2.13~dfsg-1
- 1:1.2.13~dfsg-2
- 1:1.2.13~dfsg-2etch1
- 1:1.2.13~dfsg-2etch2
- 1:1.2.13~dfsg-2etch3
- 1:1.2.13~dfsg-2etch4
- 1:1.2.14~dfsg-1
- 1:1.2.14~dfsg-2
- 1:1.2.14~dfsg-3
- 1:1.2.14~dfsg-4
- 1:1.2.15~dfsg-1
- 1:1.2.16~dfsg-1
- 1:1.2.17~dfsg-1
- 1:1.2.4.dfsg-1
- 1:1.2.4.dfsg-2
- 1:1.2.4.dfsg-3
- 1:1.2.4.dfsg-4
- 1:1.2.4.dfsg-5
- 1:1.2.4.dfsg-6
- 1:1.2.4.dfsg-6+b1
- 1:1.2.4.dfsg-7
- 1:1.2.7.1.dfsg-1
- 1:1.2.7.1.dfsg-2
- 1:1.2.7.1.dfsg-3
- 1:1.2.9.1.dfsg-1
- 1:1.4.10~dfsg-1
- 1:1.4.11~dfsg-1
- 1:1.4.11~dfsg-2
- 1:1.4.11~dfsg-3
- 1:1.4.11~dfsg-4
- 1:1.4.13~dfsg-1
- 1:1.4.15~dfsg-1
- 1:1.4.16.2~dfsg-1
- 1:1.4.16.2~dfsg-2
- 1:1.4.17~dfsg-1
- 1:1.4.17~dfsg-2
- 1:1.4.18.1~dfsg-1
- 1:1.4.18~dfsg-1
- 1:1.4.19.1~dfsg-1
- 1:1.4.20~dfsg-1
- 1:1.4.21.1~dfsg-1
- 1:1.4.21.2~dfsg-1
- 1:1.4.21.2~dfsg-2
- 1:1.4.21.2~dfsg-3
- 1:1.4.21.2~dfsg-3+lenny1
- 1:1.4.21.2~dfsg-3+lenny2
- 1:1.4.21.2~dfsg-3+lenny2.1
- 1:1.4.21.2~dfsg-3+lenny3
- 1:1.4.21.2~dfsg-3+lenny5
- 1:1.4.21.2~dfsg-3+lenny6
- 1:1.4.21.2~dfsg-3.1
- 1:1.4.2~dfsg-1
- 1:1.4.2~dfsg-2
- 1:1.4.2~dfsg-3
- 1:1.4.2~dfsg-4
- 1:1.4.2~dfsg-5
- 1:1.4.3~dfsg-1
- 1:1.4.4~dfsg-1
- 1:1.4.4~dfsg-2
- 1:1.4.4~dfsg-3
- 1:1.4.5~dfsg-1
- 1:1.4.6~dfsg-1
- 1:1.4.8~dfsg-1
- 1:1.4.8~dfsg-2
- 1:1.4.9~dfsg-1
- 1:1.6.1.0~dfsg-1
- 1:1.6.1.0~dfsg~rc3-1
- 1:1.6.2.0-1
- 1:1.6.2.0~dfsg~beta3-1
- 1:1.6.2.0~dfsg~rc1-1
- 1:1.6.2.0~rc3-1
- 1:1.6.2.0~rc3-2
- 1:1.6.2.0~rc6-1
- 1:1.6.2.0~rc7-1
- 1:1.6.2.2-1
- 1:1.6.2.6-1
- 1:1.6.2.7-1
- 1:1.6.2.9-1
- 1:1.6.2.9-1~bpo50+1
- 1:1.6.2.9-1~bpo50+2
- 1:1.6.2.9-1~bpo50+3
- 1:1.6.2.9-2
- 1:1.6.2.9-2+squeeze1
- 1:1.6.2.9-2+squeeze10
- 1:1.6.2.9-2+squeeze11
- 1:1.6.2.9-2+squeeze12
- 1:1.6.2.9-2+squeeze2
- 1:1.6.2.9-2+squeeze3
- 1:1.6.2.9-2+squeeze4
- 1:1.6.2.9-2+squeeze5
- 1:1.6.2.9-2+squeeze6
- 1:1.6.2.9-2+squeeze7
- 1:1.6.2.9-2+squeeze8
- 1:1.6.2.9-2+squeeze9
- 1:1.8.10.0~dfsg-1
- 1:1.8.10.1~dfsg-1
- 1:1.8.11.1~dfsg-1
- 1:1.8.13.0~dfsg-1
- 1:1.8.13.0~dfsg-1~bpo60+1
- 1:1.8.13.1~dfsg-1
- 1:1.8.13.1~dfsg-1+powerpcspe1
- 1:1.8.13.1~dfsg-1~bpo60+1
- 1:1.8.13.1~dfsg-2
- 1:1.8.13.1~dfsg-3
- 1:1.8.3.3-1
- 1:1.8.4-1
- 1:1.8.4.2-1
- 1:1.8.4.3-1
- 1:1.8.4.4~dfsg-1
- 1:1.8.4.4~dfsg-2
- 1:1.8.7.1~dfsg-1
- 1:1.8.7.1~dfsg-2
- 1:1.8.7.1~dfsg-3
- 1:1.8.8.0~dfsg-1
- 1:1.8.8.2~dfsg-1
- 1:11.10.0~dfsg-1
- 1:11.10.0~dfsg-1~bpo70+1
- 1:11.10.2~dfsg-1
- 1:11.10.2~dfsg-1~bpo70+1
- 1:11.11.0~dfsg-1
- 1:11.11.0~dfsg-1~bpo70+1
- 1:11.11.0~dfsg-2
- 1:11.12.0~dfsg-1
- 1:11.12.0~dfsg-1~bpo70+1
- 1:11.12.1~dfsg-1
- 1:11.13.0~dfsg-1
- 1:11.13.0~dfsg-1~bpo70+1
- 1:11.13.1~dfsg-1
- 1:11.13.1~dfsg-2
- 1:11.13.1~dfsg-2~bpo70+1
- 1:11.5.1~dfsg-1
- 1:11.5.1~dfsg-2
- 1:11.5.1~dfsg1-1
- 1:11.5.1~dfsg1-1~bpo70+1
- 1:11.6.0~dfsg-1
- 1:11.6.0~dfsg-2
- 1:11.6.0~dfsg-3
- 1:11.7.0~dfsg-1
- 1:11.7.0~dfsg-1+e1
- 1:11.7.0~dfsg-1~bpo70+1
- 1:11.8.0~dfsg-1
- 1:11.8.0~dfsg-2
- 1:11.8.1~dfsg-1
- 1:11.8.1~dfsg-1~bpo70+1
- 1:11.9.0~dfsg-1
- 1:11.9.0~dfsg-2
- 1:11.9.0~dfsg-2~bpo70+1
- 1:13.0.0~dfsg-1
- 1:13.0.0~dfsg-2
- 1:13.1.0~dfsg-1
- 1:13.1.0~dfsg-1.1
- 1:13.10.0~dfsg-1
- 1:13.11.2~dfsg-1
- 1:13.12.1~dfsg-1
- 1:13.12.2~dfsg-1
- 1:13.12.2~dfsg-2
- 1:13.13.1~dfsg-1
- 1:13.13.1~dfsg-2
- 1:13.13.1~dfsg-3
- 1:13.13.1~dfsg-3~exp1
- 1:13.13.1~dfsg-4
- 1:13.14.0~dfsg-1
- 1:13.14.0~dfsg-1~exp1
- 1:13.14.1~dfsg-1
- 1:13.14.1~dfsg-2
- 1:13.17.0~dfsg-1
- 1:13.17.0~dfsg-2
- 1:13.17.1~dfsg-1
- 1:13.17.2~dfsg-1
- 1:13.17.2~dfsg-2
- 1:13.18.1~dfsg-1
- 1:13.18.3~dfsg-1
- 1:13.18.5~dfsg-1
- 1:13.20.0~dfsg-1
- 1:13.22.0~dfsg-1
- 1:13.22.0~dfsg-2
- 1:13.23.1~dfsg-1
- 1:13.23.1~dfsg-2
- 1:13.7.2~dfsg-1
Mettez à jour vers 1:16.16.1~dfsg-2
asterisk Ubuntu:Pro:16.04:LTS
- Versions du logiciel
- 1:13.1.0~dfsg-1.1ubuntu3
- 1:13.1.0~dfsg-1.1ubuntu4
- 1:13.1.0~dfsg-1.1ubuntu4.1
- 1:13.1.0~dfsg-1.1ubuntu4.1+esm1
- Plages de versions concernées
- ECOSYSTEM: (−∞, +∞)
Aucun correctif publié
asterisk Ubuntu:18.04:LTS
- Versions du logiciel
- 1:13.17.2~dfsg-1ubuntu1
- 1:13.17.2~dfsg-2ubuntu1
- 1:13.18.1~dfsg-1ubuntu1
- 1:13.18.3~dfsg-1ubuntu1
- 1:13.18.3~dfsg-1ubuntu2
- 1:13.18.3~dfsg-1ubuntu3
- 1:13.18.3~dfsg-1ubuntu4
- Plages de versions concernées
- ECOSYSTEM: (−∞, +∞)
Aucun correctif publié
asterisk Ubuntu:20.04:LTS
- Versions du logiciel
- 1:16.2.1~dfsg-2build2
- 1:16.2.1~dfsg-2build3
- 1:16.2.1~dfsg-2ubuntu1
- Plages de versions concernées
- ECOSYSTEM: (−∞, +∞)
Aucun correctif publié
asterisk Ubuntu:22.04:LTS
- Versions du logiciel
- 1:16.16.1~dfsg-2
- 1:16.16.1~dfsg-4
- 1:16.16.1~dfsg-4build1
- 1:16.16.1~dfsg+~2.10-1
- 1:18.10.0~dfsg+~cs6.10.40431411-2
- Plages de versions concernées
- ECOSYSTEM: (−∞, +∞)
Aucun correctif publié
asterisk Ubuntu:24.04:LTS
- Versions du logiciel
- 1:20.4.0~dfsg+~cs6.13.40431414-2
- 1:20.5.0~dfsg+~cs6.13.40431414-1
- 1:20.5.1~dfsg+~cs6.13.40431414-1
- 1:20.5.2~dfsg+~cs6.13.40431414-1
- 1:20.6.0~dfsg+~cs6.13.40431414-1
- 1:20.6.0~dfsg+~cs6.13.40431414-2
- 1:20.6.0~dfsg+~cs6.13.40431414-2build3
- 1:20.6.0~dfsg+~cs6.13.40431414-2build4
- 1:20.6.0~dfsg+~cs6.13.40431414-2build5
- Plages de versions concernées
- ECOSYSTEM: (−∞, +∞)
Aucun correctif publié
asterisk Ubuntu:25.10
- Versions du logiciel
- 1:22.2.0~dfsg+~cs6.15.60671435-2
- 1:22.3.0~dfsg+~cs6.15.60671435-1
- 1:22.4.1~dfsg+~cs6.15.60671435-1
- 1:22.4.1~dfsg+~cs6.15.60671435-2
- 1:22.5.1~dfsg+~cs6.15.60671435-1
- 1:22.5.2~dfsg+~cs6.15.60671435-1
- Plages de versions concernées
- ECOSYSTEM: (−∞, +∞)
Aucun correctif publié
asterisk Ubuntu:26.10
- Versions du logiciel
- 1:22.5.2~dfsg+~cs6.15.60671435-1
- 1:22.10.0+dfsg+~cs6.17.60671434-1ubuntu2
- 1:22.10.0+dfsg+~cs6.17.60671434-1ubuntu3
- Plages de versions concernées
- ECOSYSTEM: (−∞, +∞)
Aucun correctif publié
asterisk Ubuntu:26.04:LTS
- Versions du logiciel
- 1:22.5.2~dfsg+~cs6.15.60671435-1
- Plages de versions concernées
- ECOSYSTEM: (−∞, +∞)
Aucun correctif publié
Sources originales
- http://seclists.org/fulldisclosure/2021/Jul/49
- http://packetstormsecurity.com/files/163639/Asterisk-Project-Security-Advisory-AST-2021-008.html
- https://downloads.asterisk.org/pub/security/AST-2021-008.html
- https://issues.asterisk.org/jira/browse/ASTERISK-29392
- https://lists.debian.org/debian-lts-announce/2021/08/msg00005.html
- https://www.debian.org/security/2021/dsa-4999
- https://nvd.nist.gov/vuln/detail/CVE-2021-32558