CVE-2021-31878
published 2021-07-30CVE-2021-31878: An issue was discovered in PJSIP in Asterisk before 16.19.1 and before 18.5.1. To exploit, a re-INVITE without SDP must be received after Asterisk has sent a…
PriorityP434medium6.5CVSS 3.1
AVNACLPRLUINSUCNINAH
EPSS
2.43%
82.2th percentile
An issue was discovered in PJSIP in Asterisk before 16.19.1 and before 18.5.1. To exploit, a re-INVITE without SDP must be received after Asterisk has sent a BYE request.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | asterisk | — | — |
| digium | asterisk | — | — |
| digium | asterisk | — | — |
| digium | asterisk | — | — |
| digium | asterisk | — | — |
| digium | asterisk | — | — |
| digium | asterisk | — | — |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
nvdv2.04.0MEDIUMAV:N/AC:L/Au:S/C:N/I:N/A:P
osv6.5MEDIUM
vendor_debian6.5LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-h6p9-w9r4-7x73: An issue was discovered in PJSIP in Asterisk before 16
ghsa_unreviewed·2022-05-24
CVE-2021-31878 [MEDIUM] CWE-617 GHSA-h6p9-w9r4-7x73: An issue was discovered in PJSIP in Asterisk before 16
An issue was discovered in PJSIP in Asterisk before 16.19.1 and before 18.5.1. To exploit, a re-INVITE without SDP must be received after Asterisk has sent a BYE request.
OSV
CVE-2021-31878: An issue was discovered in PJSIP in Asterisk before 16
osv·2021-07-30·CVSS 6.5
CVE-2021-31878 [MEDIUM] CVE-2021-31878: An issue was discovered in PJSIP in Asterisk before 16
An issue was discovered in PJSIP in Asterisk before 16.19.1 and before 18.5.1. To exploit, a re-INVITE without SDP must be received after Asterisk has sent a BYE request.
Debian
CVE-2021-31878: asterisk - An issue was discovered in PJSIP in Asterisk before 16.19.1 and before 18.5.1. T...
vendor_debian·2021·CVSS 6.5
CVE-2021-31878 [MEDIUM] CVE-2021-31878: asterisk - An issue was discovered in PJSIP in Asterisk before 16.19.1 and before 18.5.1. T...
An issue was discovered in PJSIP in Asterisk before 16.19.1 and before 18.5.1. To exploit, a re-INVITE without SDP must be received after Asterisk has sent a BYE request.
Scope: local
bullseye: resolved
sid: resolved
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://downloads.asterisk.org/pub/security/AST-2021-007.htmlhttp://packetstormsecurity.com/files/163638/Asterisk-Project-Security-Advisory-AST-2021-007.htmlhttp://seclists.org/fulldisclosure/2021/Jul/48https://downloads.digium.com/pub/security/AST-2021-007.htmlhttps://issues.asterisk.org/jira/browse/ASTERISK-29381http://downloads.asterisk.org/pub/security/AST-2021-007.htmlhttp://packetstormsecurity.com/files/163638/Asterisk-Project-Security-Advisory-AST-2021-007.htmlhttp://seclists.org/fulldisclosure/2021/Jul/48https://downloads.digium.com/pub/security/AST-2021-007.htmlhttps://issues.asterisk.org/jira/browse/ASTERISK-29381
2021-07-30
Published