CVE-2019-7251

An Integer Signedness issue (for a return code) in the res_pjsip_sdp_rtp module in Digium Asterisk versions 15.7.1 and earlier and 16.1.1 and earlier allows remote authenticated users to crash Asterisk via a specially crafted SDP protocol violation.

Score

CVSS 3.0 6.5 Medium

Status

Modified - cve@mitre.org

Published

2019-03-28

Last modified

2024-08-04

Weaknesses

CWE-190

Affected products

• Asterisk (Digium)

References

• https://downloads.asterisk.org/pub/security/AST-2019-001.html
• https://issues.asterisk.org/jira/browse/ASTERISK-28260