Alpine/asterisk: medium 6.5
A use-after-free in res_pjsip_pubsub.c in Sangoma Asterisk 16.28, 18.14, 19.6, and certified/18.9-cert2 may allow a remote authenticated attacker to crash Asterisk (denial of service) by performing ac
Action: Upgrade asterisk to 18.15.1-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 16.0.0 | 18.15.1-r0 | - |
Fixed versions
| 18.15.1-r0 |
Sources
- osv: ALPINE-CVE-2022-42705#Alpine:v3.23/asterisk
- https://security.alpinelinux.org/vuln/CVE-2022-42705
published · modified · JSON