cbcvebase.
CVE-2019-15639
published 2019-09-09

CVE-2019-15639: main/translate.c in Sangoma Asterisk 13.28.0 and 16.5.0 allows a remote attacker to send a specific RTP packet during a call and cause a crash in a specific…

PriorityP352high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
21.92%
97.3th percentile
main/translate.c in Sangoma Asterisk 13.28.0 and 16.5.0 allows a remote attacker to send a specific RTP packet during a call and cause a crash in a specific scenario.

Affected

16 ranges
VendorProductVersion rangeFixed in
debianasterisk——
digiumasterisk>= 0 < 16.5.1-r016.5.1-r0
digiumasterisk>= 0 < 16.5.1-r016.5.1-r0
digiumasterisk>= 0 < 16.5.1-r016.5.1-r0
digiumasterisk>= 0 < 16.5.1-r016.5.1-r0
digiumasterisk>= 0 < 16.5.1-r016.5.1-r0
digiumasterisk>= 0 < 16.5.1-r016.5.1-r0
digiumasterisk>= 0 < 16.5.1-r016.5.1-r0
digiumasterisk>= 0 < 16.5.1-r016.5.1-r0
digiumasterisk>= 0 < 16.5.1-r016.5.1-r0
digiumasterisk>= 0 < 16.5.1-r016.5.1-r0
digiumasterisk>= 0 < 16.5.1-r016.5.1-r0
digiumasterisk>= 0 < 16.5.1-r016.5.1-r0
digiumasterisk>= 0 < 16.5.1-r016.5.1-r0
digiumasterisk13.0.0 – 13.28.0—
digiumasterisk16.0.0 – 16.5.0—

CVSS provenance

nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
osv7.5HIGH
vendor_debian7.5LOW
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.