FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2024-04-19 20:48:44 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML ID	Description
fb3455be-ebf6-11eb-aef1-0897988a1c07	asterisk -- Remote crash when using IAX2 channel driver The Asterisk project reports: If the IAX2 channel driver receives a packet that contains an unsupported media format it can cause a crash to occur in Asterisk. Discovery 2021-04-13 Entry 2021-07-23 asterisk13 < 13.38.3 asterisk16 < 16.19.1 asterisk18 < 18.5.1 CVE-2021-32558 https://downloads.asterisk.org/pub/security/AST-2021-008.html
9e8f0766-7d21-11eb-a2be-001999f8d30b	asterisk -- Crash when negotiating T.38 with a zero port The Asterisk project reports: When Asterisk sends a re-invite initiating T.38 faxing and the endpoint responds with a m=image line and zero port, a crash will occur in Asterisk. This is a reoccurrence of AST-2019-004. Discovery 2021-02-20 Entry 2021-03-04 asterisk16 < 16.16.2 asterisk18 < 18.2.2 CVE-2019-15297 https://downloads.asterisk.org/pub/security/AST-2021-006.html
b330db5f-7225-11eb-8386-001999f8d30b	asterisk -- Remote crash in res_pjsip_diversion The Asterisk project reports: If a registered user is tricked into dialing a malicious number that sends lots of 181 responses to Asterisk, each one will cause a 181 to be sent back to the original caller with an increasing number of entries in the "Supported" header. Eventually the number of entries in the header exceeds the size of the entry array and causes a crash. Discovery 2021-01-04 Entry 2021-02-18 asterisk13 ge 13.38.1 lt 13.38.2 asterisk16 ge 16.15.1 lt 16.16.1 asterisk18 ge 18.1.1 lt 18.2.1 CVE-2020-35776 https://downloads.asterisk.org/pub/security/AST-2021-001.html
e3894955-7227-11eb-8386-001999f8d30b	asterisk -- Remote crash possible when negotiating T.38 The Asterisk project reports: When re-negotiating for T.38 if the initial remote response was delayed just enough Asterisk would send both audio and T.38 in the SDP. If this happened, and the remote responded with a declined T.38 stream then Asterisk would crash. Discovery 2021-02-05 Entry 2021-02-18 asterisk16 ge 16.15.0 lt 16.16.1 asterisk18 ge 18.1.0 lt 18.2.1 CVE-2021-26717 https://downloads.asterisk.org/pub/security/AST-2021-002.html
5d8ef725-7228-11eb-8386-001999f8d30b	asterisk -- Remote attacker could prematurely tear down SRTP calls The Asterisk project reports: An unauthenticated remote attacker could replay SRTP packets which could cause an Asterisk instance configured without strict RTP validation to tear down calls prematurely. Discovery 2021-02-18 Entry 2021-02-18 asterisk13 ge 13.38.1 lt 13.38.2 asterisk16 ge 16.16.0 lt 16.16.1 asterisk18 ge 18.2.0 lt 18.2.1 CVE-2021-26712 https://downloads.asterisk.org/pub/security/AST-2021-003.html
53fbffe6-ebf7-11eb-aef1-0897988a1c07	asterisk -- pjproject/pjsip: crash when SSL socket destroyed during handshake The Asterisk project reports: Depending on the timing, it's possible for Asterisk to crash when using a TLS connection if the underlying socket parent/listener gets destroyed during the handshake. Discovery 2021-05-05 Entry 2021-07-23 asterisk13 < 13.38.3 asterisk16 < 16.19.1 asterisk18 < 18.5.1 CVE-2021-32686 https://downloads.asterisk.org/pub/security/AST-2021-009.html
ca21f5e7-7228-11eb-8386-001999f8d30b	asterisk -- An unsuspecting user could crash Asterisk with multiple hold/unhold requests The Asterisk project reports: Due to a signedness comparison mismatch, an authenticated WebRTC client could cause a stack overflow and Asterisk crash by sending multiple hold/unhold requests in quick succession. Discovery 2021-02-11 Entry 2021-02-18 asterisk16 ge 16.16.0 lt 16.16.1 asterisk18 ge 18.2.0 lt 18.2.1 CVE-2021-26714 https://downloads.asterisk.org/pub/security/AST-2021-004.html
1bb2826b-7229-11eb-8386-001999f8d30b	asterisk -- Remote Crash Vulnerability in PJSIP channel driver The Asterisk project reports: Given a scenario where an outgoing call is placed from Asterisk to a remote SIP server it is possible for a crash to occur. Discovery 2021-02-08 Entry 2021-02-18 asterisk13 < 13.38.2 asterisk16 < 16.16.1 asterisk18 < 18.2.1 CVE-2021-26906 https://downloads.asterisk.org/pub/security/AST-2021-005.html