جزئیات آسیب‌پذیری
CVE-2025-57767
Asterisk can crash from a specifically malformed Authorization header in an incoming SIP request
شرح رسمی (انگلیسی)
Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.15.2, 21.10.2, and 22.5.2, if a SIP request is received with an Authorization header that contains a realm that wasn't in a previous 401 response's WWW-Authenticate header, or an Authorization header with an incorrect realm was received without a previous 401 response being sent, the get_authorization_header() function in res_pjsip_authenticator_digest will return a NULL. This wasn't being checked before attempting to get the digest algorithm from the header which causes a SEGV. This issue has been patched in versions 20.15.2, 21.10.2, and 22.5.2. There are no workarounds.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 7.5بالا | 3.1 | CVEProject cvelistV5 (CNA) (GitHub_M) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
محصولات آسیب‌پذیر
| فروشنده | محصول | نسخه‌ها | منبع |
|---|---|---|---|
| asterisk | asterisk | < 20.15.2 | CVEProject cvelistV5 (CNA) |
| asterisk | asterisk | < 21.10.2 | CVEProject cvelistV5 (CNA) |
| asterisk | asterisk | < 22.5.2 | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۳- https://github.com/asterisk/asterisk/security/advisories/GHSA-64qc-9x89-rx5j x_refsource_CONFIRM
- https://github.com/asterisk/asterisk/pull/1407 x_refsource_MISC
- https://github.com/asterisk/asterisk/commit/02993717b08f899d4aca9888062f35dfb198584f x_refsource_MISC
اطلاعات
- تاریخ انتشار
- ۱۴۰۴/۰۶/۰۶
- آخرین به‌روزرسانی
- ۱۴۰۴/۰۶/۰۶
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- GitHub_M
پیش‌بینی بهره‌برداری (EPSS)
ارزیابی SSVC (CISA)
- قابل خودکارسازی
- بله
- وضعیت بهره‌برداری
- ندارد
- اثر فنی
- جزئی
ضعف‌ها (CWE)
- CWE-253Incorrect Check of Function Return Value