Debian/asterisk: critical 9.1
Read out-of-bounds in PJSUA API when calling pjsua_recorder_create. An attacker-controlled 'filename' argument may cause an out-of-bounds read when the filename is shorter than 4 characters.
Action: Upgrade asterisk to 1:18.11.1~dfsg+~cs6.10.40431413-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1:18.11.1~dfsg+~cs6.10.40431413-1 | - |
Fixed versions
| 1:18.11.1~dfsg+~cs6.10.40431413-1 |
Sources
published · modified · JSON