FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2024-04-18 11:12:36 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML ID	Description
fb3455be-ebf6-11eb-aef1-0897988a1c07	asterisk -- Remote crash when using IAX2 channel driver The Asterisk project reports: If the IAX2 channel driver receives a packet that contains an unsupported media format it can cause a crash to occur in Asterisk. Discovery 2021-04-13 Entry 2021-07-23 asterisk13 < 13.38.3 asterisk16 < 16.19.1 asterisk18 < 18.5.1 CVE-2021-32558 https://downloads.asterisk.org/pub/security/AST-2021-008.html
9e8f0766-7d21-11eb-a2be-001999f8d30b	asterisk -- Crash when negotiating T.38 with a zero port The Asterisk project reports: When Asterisk sends a re-invite initiating T.38 faxing and the endpoint responds with a m=image line and zero port, a crash will occur in Asterisk. This is a reoccurrence of AST-2019-004. Discovery 2021-02-20 Entry 2021-03-04 asterisk16 < 16.16.2 asterisk18 < 18.2.2 CVE-2019-15297 https://downloads.asterisk.org/pub/security/AST-2021-006.html
53fbffe6-ebf7-11eb-aef1-0897988a1c07	asterisk -- pjproject/pjsip: crash when SSL socket destroyed during handshake The Asterisk project reports: Depending on the timing, it's possible for Asterisk to crash when using a TLS connection if the underlying socket parent/listener gets destroyed during the handshake. Discovery 2021-05-05 Entry 2021-07-23 asterisk13 < 13.38.3 asterisk16 < 16.19.1 asterisk18 < 18.5.1 CVE-2021-32686 https://downloads.asterisk.org/pub/security/AST-2021-009.html

VuXML ID

Description

fb3455be-ebf6-11eb-aef1-0897988a1c07

asterisk -- Remote crash when using IAX2 channel driver

The Asterisk project reports:

If the IAX2 channel driver receives a packet that contains an unsupported media format it can cause a crash to occur in Asterisk.

Discovery 2021-04-13
Entry 2021-07-23
asterisk13

< 13.38.3

asterisk16

< 16.19.1

asterisk18

< 18.5.1

CVE-2021-32558
https://downloads.asterisk.org/pub/security/AST-2021-008.html

9e8f0766-7d21-11eb-a2be-001999f8d30b

asterisk -- Crash when negotiating T.38 with a zero port

The Asterisk project reports:

When Asterisk sends a re-invite initiating T.38 faxing and the endpoint responds with a m=image line and zero port, a crash will occur in Asterisk. This is a reoccurrence of AST-2019-004.

Discovery 2021-02-20
Entry 2021-03-04
asterisk16

< 16.16.2

asterisk18

< 18.2.2

CVE-2019-15297
https://downloads.asterisk.org/pub/security/AST-2021-006.html

53fbffe6-ebf7-11eb-aef1-0897988a1c07

asterisk -- pjproject/pjsip: crash when SSL socket destroyed during handshake

The Asterisk project reports:

Depending on the timing, it's possible for Asterisk to crash when using a TLS connection if the underlying socket parent/listener gets destroyed during the handshake.

Discovery 2021-05-05
Entry 2021-07-23
asterisk13

< 13.38.3

asterisk16

< 16.19.1

asterisk18

< 18.5.1

CVE-2021-32686
https://downloads.asterisk.org/pub/security/AST-2021-009.html