Asterisk Project Security Advisory – AST-2022-005<\/p>\n
Product Asterisk
\nSummary pjproject: undefined behavior after freeing a dialog
\nset
\nNature of Advisory Denial of service
\nSusceptibility Remote unauthenticated sessions
\nSeverity Major
\nExploits Known Yes
\nReported On March 3, 2022
\nReported By Sauw Ming
\nPosted On March 4, 2022
\nLast Updated On March 3, 2022
\nAdvisory Contact kharwell AT sangoma DOT com
\nCVE Name CVE-2022-23608<\/p>\n
Description When acting as a UAC, and when placing an outgoing
\ncall to a target that then forks Asterisk may
\nexperience undefined behavior (crashes, hangs, etc\u2026)
\nafter a dialog set is prematurely freed.
\nModules Affected bundled pjproject<\/p>\n
Resolution If you use \u201cwith-pjproject-bundled\u201d then upgrade to, or
\ninstall one of, the versions of Asterisk listed below.
\nOtherwise install the appropriate version of pjproject that
\ncontains the patch.<\/p>\n
Affected Versions
\nProduct Release Series
\nAsterisk Open Source 16.x All versions
\nAsterisk Open Source 18.x All versions
\nAsterisk Open Source 19.x All versions
\nCertified Asterisk 16.x All versions<\/p>\n
Corrected In
\nProduct Release
\nAsterisk Open Source 16.24.1,18.10.1,19.2.1
\nCertified Asterisk 16.8-cert13<\/p>\n
Patches
\nPatch URL Revision
\nhttps:\/\/downloads.digium.com\/pub\/security\/AST-2022-005-16.diff Asterisk
\n16
\nhttps:\/\/downloads.digium.com\/pub\/security\/AST-2022-005-18.diff Asterisk
\n18
\nhttps:\/\/downloads.digium.com\/pub\/security\/AST-2022-005-19.diff Asterisk
\n19
\nhttps:\/\/downloads.digium.com\/pub\/security\/AST-2022-005-16.8.diff Certified
\nAsterisk
\n16.8<\/p>\n
Links https:\/\/issues.asterisk.org\/jira\/browse\/ASTERISK-29945<\/p>\n
https:\/\/downloads.asterisk.org\/pub\/security\/AST-2022-005.html<\/p>\n
https:\/\/github.com\/pjsip\/pjproject\/security\/advisories\/GHSA-ffff-m5fm-qm62<\/p>\n
Asterisk Project Security Advisories are posted at
\nhttp:\/\/www.asterisk.org\/security<\/p>\n
This document may be superseded by later versions; if so, the latest
\nversion will be posted at
\nhttps:\/\/downloads.digium.com\/pub\/security\/AST-2022-005.pdf and
\nhttps:\/\/downloads.digium.com\/pub\/security\/AST-2022-005.html<\/p>\n
Revision History
\nDate Editor Revisions Made
\nMarch 3, 2022 Kevin Harwell Initial revision<\/p>\n
Asterisk Project Security Advisory – AST-2022-005
\nCopyright \u00a9 2022 Digium, Inc. All Rights Reserved.
\nPermission is hereby granted to distribute and publish this advisory in its
\noriginal, unaltered form.<\/p>\n","protected":false},"excerpt":{"rendered":"
Asterisk Project Security Advisory – AST-2022-005 Product Asterisk Summary pjproject: undefined behavior after freeing a dialog set Nature of Advisory Denial of service Susceptibility Remote unauthenticated sessions Severity Major Exploits Known Yes Reported On March 3, 2022 Reported By Sauw Ming Posted On March 4, 2022 Last Updated On March 3, 2022 Advisory Contact kharwell …<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-21383","post","type-post","status-publish","format-standard","hentry","category-vulnerability"],"_links":{"self":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/21383","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/comments?post=21383"}],"version-history":[{"count":0,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/21383\/revisions"}],"wp:attachment":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media?parent=21383"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/categories?post=21383"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/tags?post=21383"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}