Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in Sangoma Asterisk 16.x before 16.16.1, 17.x before 17.9.2, and 18.x before 18.2.1 and Certified Asterisk before 16.8-cert6. When re-negotiating for T.38, if the initial remote response was delayed just enough, Asterisk would send both audio and T.38 in the SDP. If this happened, and the remote responded with a declined T.38 stream, then Asterisk would crash.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Sangoma Technologies Asterisk 安全漏洞
Vulnerability Description
Sangoma Technologies Asterisk是加拿大Sangoma Technologies公司的一套开源电话交换机（PBX）系统软件。该软件支持语音信箱、多方语音会议、交互式语音应答(IVR)等。 Sangoma Technologies Asterisk 中存在安全漏洞。该漏洞源于重新协商T.38时，如果初始远程响应延迟刚好足够，应用将在SDP中发送音频和T.38。如果发生这种情况，并且远程设备以拒绝的T.38流响应，那么应用将崩溃。以下产品及版本受到影响：Sangoma Asteris
CVSS Information
N/A
Vulnerability Type
N/A