Vulnerability Name:

CVE-2019-13161 (CCN-163679)

Assigned:2019-07-01
Published:2019-07-01
Updated:2022-06-01
Summary:An issue was discovered in Asterisk Open Source through 13.27.0, 14.x and 15.x through 15.7.2, and 16.x through 16.4.0, and Certified Asterisk through 13.21-cert3. A pointer dereference in chan_sip while handling SDP negotiation allows an attacker to crash Asterisk when handling an SDP answer to an outgoing T.38 re-invite. To exploit this vulnerability an attacker must cause the chan_sip module to send a T.38 re-invite request to them. Upon receipt, the attacker must send an SDP answer containing both a T.38 UDPTL stream and another media stream containing only a codec (which is not permitted according to the chan_sip configuration).
CVSS v3 Severity:5.3 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
4.6 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): High
Privileges Required (PR): Low
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): High
5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
4.6 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Low
CVSS v2 Severity:3.5 Low (CVSS v2 Vector: AV:N/AC:M/Au:S/C:N/I:N/A:P)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Authentication (Au): Single_Instance
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Partial
5.0 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Partial
Vulnerability Type:CWE-476
Vulnerability Consequences:Denial of Service
References:Source: MITRE
Type: CNA
CVE-2019-13161

Source: CCN
Type: Asterisk Project Security Advisory - AST-2016-006
Remote Crash Vulnerability in chan_sip channel driver

Source: CONFIRM
Type: Vendor Advisory
http://downloads.digium.com/pub/security/AST-2019-003.html

Source: XF
Type: UNKNOWN
asterisk-cve201913161-dos(163679)

Source: CONFIRM
Type: Issue Tracking, Vendor Advisory
https://issues.asterisk.org/jira/browse/ASTERISK-28465

Source: MLIST
Type: Mailing List, Third Party Advisory
[debian-lts-announce] 20191130 [SECURITY] [DLA 2017-1] asterisk security update

Source: MLIST
Type: Mailing List, Third Party Advisory
[debian-lts-announce] 20220403 [SECURITY] [DLA 2969-1] asterisk security update

Vulnerable Configuration:Configuration 1:
  • cpe:/a:digium:certified_asterisk:11.6:cert13:*:*:lts:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.14.0:rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:11.4.0:rc3:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:11.6:cert6:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:11.6:cert8:*:*:lts:*:*:*
  • OR cpe:/a:digium:certified_asterisk:11.6:cert2:*:*:lts:*:*:*
  • OR cpe:/a:digium:certified_asterisk:13.1.0:rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:11.1.0:rc3:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.0.0:beta2:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.10.0:rc2:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.6.0:-:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.11:cert6:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:13.8:cert1:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.8.0:rc3:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.11:cert5:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.12.0:rc2:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.3.0:-:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.15:cert3:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:11.3.0:rc2:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:11.6:cert4:*:*:lts:*:*:*
  • OR cpe:/a:digium:certified_asterisk:13.1.0:*:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.11:cert10:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.11:cert2:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.11.0:rc2:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.11.0:rc3:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.15:cert1_rc3:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.11:cert9:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:11.6:cert15:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:11.6:cert3:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:11.6:cert7:*:*:lts:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.0.0:beta5:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.0.0:rc2:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.0.0:rc3:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.4.0:rc3:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.5.0:-:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.13.0:rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.28:cert1:*:*:lts:*:*:*
  • OR cpe:/a:digium:certified_asterisk:11.6:cert1_rc2:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:11.6.0:-:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.0.0:rc5:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.1.0:rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.4.0:rc2:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.11:cert8:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.13.0:-:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.0.0:-:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.15:cert1-rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.28:cert2:*:*:lts:*:*:*
  • OR cpe:/a:digium:certified_asterisk:11.3.0:*:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:11.5.0:rc2:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:11.6:cert1:*:*:lts:*:*:*
  • OR cpe:/a:digium:certified_asterisk:13.8:cert1_rc2:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.7.0:rc2:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.8.0:rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.8.0:rc2:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.11:cert1:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.28.0:*:*:*:lts:*:*:*
  • OR cpe:/a:digium:certified_asterisk:11.0.0:*:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:11.0.0:rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:11.4.0:rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:11.6:cert14:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.0.0:beta4:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.7.0:-:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.9.0:-:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.15:cert1-rc2:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.15:cert4:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.15:cert6:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:11.4.0:*:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:11.6:cert1:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:11.6:cert12:*:*:lts:*:*:*
  • OR cpe:/a:digium:certified_asterisk:13.8:cert1_rc3:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.0.0:rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.0.0:rc4:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.5.0:rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.9.0:rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.9.0:rc2:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.9.0:rc3:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.10.0:-:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.11:cert7:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.13.0:rc2:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.14.0:rc2:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.15:-:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.28:*:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:11.6:cert1_rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:11.6:cert10:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:11.6:cert2:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:11.6.0:*:*:*:lts:*:*:*
  • OR cpe:/a:digium:certified_asterisk:11.6.0:rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:13.1.0:rc2:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:13.13:cert2:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:13.13:cert3:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:13.13:cert4:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.0.0:beta1:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.0.0:beta3:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.4.0:-:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.6.0:rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.6.0:rc3:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.7.0:rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.8.0:rc5:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.10.0:rc4:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.11:cert3:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.2.0:rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.3.0:rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.3.0:rc2:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.15:cert1-rc3:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.15:cert5:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:11.1.0:rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:11.6:cert13:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:11.6:cert15:*:*:lts:*:*:*
  • OR cpe:/a:digium:certified_asterisk:11.6:cert3:*:*:lts:*:*:*
  • OR cpe:/a:digium:certified_asterisk:11.6:cert8:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:11.6:cert9:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:13.1:cert1:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:13.8.0:*:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.8.0:-:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.11:cert:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.11.0:rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.12.0:-:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.15:cert1_rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.15:cert1_rc2:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:11.0.0:rc2:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:11.4.0:rc2:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:11.5.0:*:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:11.6:cert14:*:*:lts:*:*:*
  • OR cpe:/a:digium:certified_asterisk:11.6:cert5:*:*:lts:*:*:*
  • OR cpe:/a:digium:certified_asterisk:11.6:cert6:*:*:lts:*:*:*
  • OR cpe:/a:digium:certified_asterisk:11.6:cert7:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:13.8:cert2_rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.1.0:-:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.2.0:-:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.3.0:rc3:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.4.0:rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.6.0:rc2:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.10.0:rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.10.0:rc3:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.11:cert4:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.11.0:-:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.12.0:rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.12.0:rc3:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.15:cert1:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:11.1.0:*:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:11.1.0:rc2:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:11.3.0:rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:11.5.0:rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:11.6:cert11:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:11.6:cert16:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:11.6:cert4:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:11.6:cert5:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:13.1:cert2:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:13.8:cert1_rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:13.8.0:rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.11:cert5-rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.11:cert5-rc2:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.15:cert7:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.28:cert1-rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:11.2:cert1:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:11.2:cert1-rc2:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:11.2:cert2:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:11.2:cert3:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:11.6:cert1-rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:11.6:cert1-rc2:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:11.6:cert17:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:11.6:cert18:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:11.6.0:rc2:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:13.8:cert1-rc2:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:13.8:cert1-rc3:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:13.13:cert1-rc3:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:13.13:cert1-rc4:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:13.21:cert1-rc2:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:13.21:cert2:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:13.18:cert2:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:13.18:cert3:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.11:cert3-rc2:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.11:cert9-rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:13.21:cert3:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.28:cert4:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:11.6:cert12:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:11.6:cert14-rc2:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:13.1:cert1-rc3:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:13.1:cert7:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:13.8:cert2:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:13.13:cert1-rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:13.13:cert5:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:13.13:cert7:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:13.18:cert1-rc3:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:13.21:cert1-rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:13.18:cert4:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.15:cert2:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.28:cert5:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:11.6:cert14-rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:13.1:cert3:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:13.1:cert3-rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:13.1:cert4:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:13.1:cert5:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:13.8:cert2-rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:13.8:cert3:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:13.8:cert4:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:13.13:cert9:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:13.13-cert2:*:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:13.18:cert1:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:13.18:cert1-rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.8.0:rc4:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.11:cert3-rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.28:cert2:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:1.8.28:cert3:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:13.1:cert1-rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:13.1:cert6:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:13.1:cert8:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:13.13:cert1-rc2:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:13.13:cert6:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:13.13:cert8:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:13.18:cert1-rc2:*:*:*:*:*:*
  • OR cpe:/a:digium:certified_asterisk:13.21:cert1:*:*:*:*:*:*

    • Configuration 2:
  • cpe:/a:digium:asterisk:*:*:*:*:*:*:*:* (Version >= 15.0.0 and < 15.7.3)
  • OR cpe:/a:digium:asterisk:*:*:*:*:*:*:*:* (Version >= 16.0.0 and < 16.4.1)
  • OR cpe:/a:digium:asterisk:*:*:*:*:*:*:*:* (Version >= 13.0.0 and < 13.27.1)

    • Configuration 3:
  • cpe:/o:debian:debian_linux:8.0:*:*:*:*:*:*:*
  • OR cpe:/o:debian:debian_linux:9.0:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:com.ubuntu.bionic:def:2019131610000000
    V
    		CVE-2019-13161 on Ubuntu 18.04 LTS (bionic) - medium.
    2019-07-12
    oval:com.ubuntu.xenial:def:2019131610000000
    V
    		CVE-2019-13161 on Ubuntu 16.04 LTS (xenial) - medium.
    2019-07-12
    oval:com.ubuntu.disco:def:2019131610000000
    V
    		CVE-2019-13161 on Ubuntu 19.04 (disco) - untriaged.
    2019-07-12
    BACK
    digium certified asterisk 11.6 cert13
    digium certified asterisk 1.8.14.0 rc1
    digium certified asterisk 11.4.0 rc3
    digium certified asterisk 11.6 cert6
    digium certified asterisk 11.6 cert8
    digium certified asterisk 11.6 cert2
    digium certified asterisk 13.1.0 rc1
    digium certified asterisk 11.1.0 rc3
    digium certified asterisk 1.8.0.0 beta2
    digium certified asterisk 1.8.10.0 rc2
    digium certified asterisk 1.8.6.0 -
    digium certified asterisk 1.8.11 cert6
    digium certified asterisk 13.8 cert1
    digium certified asterisk 1.8.8.0 rc3
    digium certified asterisk 1.8.11 cert5
    digium certified asterisk 1.8.12.0 rc2
    digium certified asterisk 1.8.3.0 -
    digium certified asterisk 1.8.15 cert3
    digium certified asterisk 11.3.0 rc2
    digium certified asterisk 11.6 cert4
    digium certified asterisk 13.1.0
    digium certified asterisk 1.8.11 cert10
    digium certified asterisk 1.8.11 cert2
    digium certified asterisk 1.8.11.0 rc2
    digium certified asterisk 1.8.11.0 rc3
    digium certified asterisk 1.8.15 cert1_rc3
    digium certified asterisk 1.8.11 cert9
    digium certified asterisk 11.6 cert15
    digium certified asterisk 11.6 cert3
    digium certified asterisk 11.6 cert7
    digium certified asterisk 1.8.0.0 beta5
    digium certified asterisk 1.8.0.0 rc2
    digium certified asterisk 1.8.0.0 rc3
    digium certified asterisk 1.8.4.0 rc3
    digium certified asterisk 1.8.5.0 -
    digium certified asterisk 1.8.13.0 rc1
    digium certified asterisk 1.8.28 cert1
    digium certified asterisk 11.6 cert1_rc2
    digium certified asterisk 11.6.0 -
    digium certified asterisk 1.8.0.0 rc5
    digium certified asterisk 1.8.1.0 rc1
    digium certified asterisk 1.8.4.0 rc2
    digium certified asterisk 1.8.11 cert8
    digium certified asterisk 1.8.13.0 -
    digium certified asterisk 1.8.0.0 -
    digium certified asterisk 1.8.15 cert1-rc1
    digium certified asterisk 1.8.28 cert2
    digium certified asterisk 11.3.0
    digium certified asterisk 11.5.0 rc2
    digium certified asterisk 11.6 cert1
    digium certified asterisk 13.8 cert1_rc2
    digium certified asterisk 1.8.7.0 rc2
    digium certified asterisk 1.8.8.0 rc1
    digium certified asterisk 1.8.8.0 rc2
    digium certified asterisk 1.8.11 cert1
    digium certified asterisk 1.8.28.0
    digium certified asterisk 11.0.0
    digium certified asterisk 11.0.0 rc1
    digium certified asterisk 11.4.0 rc1
    digium certified asterisk 11.6 cert14
    digium certified asterisk 1.8.0.0 beta4
    digium certified asterisk 1.8.7.0 -
    digium certified asterisk 1.8.9.0 -
    digium certified asterisk 1.8.15 cert1-rc2
    digium certified asterisk 1.8.15 cert4
    digium certified asterisk 1.8.15 cert6
    digium certified asterisk 11.4.0
    digium certified asterisk 11.6 cert1
    digium certified asterisk 11.6 cert12
    digium certified asterisk 13.8 cert1_rc3
    digium certified asterisk 1.8.0.0 rc1
    digium certified asterisk 1.8.0.0 rc4
    digium certified asterisk 1.8.5.0 rc1
    digium certified asterisk 1.8.9.0 rc1
    digium certified asterisk 1.8.9.0 rc2
    digium certified asterisk 1.8.9.0 rc3
    digium certified asterisk 1.8.10.0 -
    digium certified asterisk 1.8.11 cert7
    digium certified asterisk 1.8.13.0 rc2
    digium certified asterisk 1.8.14.0 rc2
    digium certified asterisk 1.8.15 -
    digium certified asterisk 1.8.28
    digium certified asterisk 11.6 cert1_rc1
    digium certified asterisk 11.6 cert10
    digium certified asterisk 11.6 cert2
    digium certified asterisk 11.6.0
    digium certified asterisk 11.6.0 rc1
    digium certified asterisk 13.1.0 rc2
    digium certified asterisk 13.13 cert2
    digium certified asterisk 13.13 cert3
    digium certified asterisk 13.13 cert4
    digium certified asterisk 1.8.0.0 beta1
    digium certified asterisk 1.8.0.0 beta3
    digium certified asterisk 1.8.4.0 -
    digium certified asterisk 1.8.6.0 rc1
    digium certified asterisk 1.8.6.0 rc3
    digium certified asterisk 1.8.7.0 rc1
    digium certified asterisk 1.8.8.0 rc5
    digium certified asterisk 1.8.10.0 rc4
    digium certified asterisk 1.8.11 cert3
    digium certified asterisk 1.8.2.0 rc1
    digium certified asterisk 1.8.3.0 rc1
    digium certified asterisk 1.8.3.0 rc2
    digium certified asterisk 1.8.15 cert1-rc3
    digium certified asterisk 1.8.15 cert5
    digium certified asterisk 11.1.0 rc1
    digium certified asterisk 11.6 cert13
    digium certified asterisk 11.6 cert15
    digium certified asterisk 11.6 cert3
    digium certified asterisk 11.6 cert8
    digium certified asterisk 11.6 cert9
    digium certified asterisk 13.1 cert1
    digium certified asterisk 13.8.0
    digium certified asterisk 1.8.8.0 -
    digium certified asterisk 1.8.11 cert
    digium certified asterisk 1.8.11.0 rc1
    digium certified asterisk 1.8.12.0 -
    digium certified asterisk 1.8.15 cert1_rc1
    digium certified asterisk 1.8.15 cert1_rc2
    digium certified asterisk 11.0.0 rc2
    digium certified asterisk 11.4.0 rc2
    digium certified asterisk 11.5.0
    digium certified asterisk 11.6 cert14
    digium certified asterisk 11.6 cert5
    digium certified asterisk 11.6 cert6
    digium certified asterisk 11.6 cert7
    digium certified asterisk 13.8 cert2_rc1
    digium certified asterisk 1.8.1.0 -
    digium certified asterisk 1.8.2.0 -
    digium certified asterisk 1.8.3.0 rc3
    digium certified asterisk 1.8.4.0 rc1
    digium certified asterisk 1.8.6.0 rc2
    digium certified asterisk 1.8.10.0 rc1
    digium certified asterisk 1.8.10.0 rc3
    digium certified asterisk 1.8.11 cert4
    digium certified asterisk 1.8.11.0 -
    digium certified asterisk 1.8.12.0 rc1
    digium certified asterisk 1.8.12.0 rc3
    digium certified asterisk 1.8.15 cert1
    digium certified asterisk 11.1.0
    digium certified asterisk 11.1.0 rc2
    digium certified asterisk 11.3.0 rc1
    digium certified asterisk 11.5.0 rc1
    digium certified asterisk 11.6 cert11
    digium certified asterisk 11.6 cert16
    digium certified asterisk 11.6 cert4
    digium certified asterisk 11.6 cert5
    digium certified asterisk 13.1 cert2
    digium certified asterisk 13.8 cert1_rc1
    digium certified asterisk 13.8.0 rc1
    digium certified asterisk 1.8.11 cert5-rc1
    digium certified asterisk 1.8.11 cert5-rc2
    digium certified asterisk 1.8.15 cert7
    digium certified asterisk 1.8.28 cert1-rc1
    digium certified asterisk 11.2 cert1
    digium certified asterisk 11.2 cert1-rc2
    digium certified asterisk 11.2 cert2
    digium certified asterisk 11.2 cert3
    digium certified asterisk 11.6 cert1-rc1
    digium certified asterisk 11.6 cert1-rc2
    digium certified asterisk 11.6 cert17
    digium certified asterisk 11.6 cert18
    digium certified asterisk 11.6.0 rc2
    digium certified asterisk 13.8 cert1-rc2
    digium certified asterisk 13.8 cert1-rc3
    digium certified asterisk 13.13 cert1-rc3
    digium certified asterisk 13.13 cert1-rc4
    digium certified asterisk 13.21 cert1-rc2
    digium certified asterisk 13.21 cert2
    digium certified asterisk 13.18 cert2
    digium certified asterisk 13.18 cert3
    digium certified asterisk 1.8.11 cert3-rc2
    digium certified asterisk 1.8.11 cert9-rc1
    digium certified asterisk 13.21 cert3
    digium certified asterisk 1.8.28 cert4
    digium certified asterisk 11.6 cert12
    digium certified asterisk 11.6 cert14-rc2
    digium certified asterisk 13.1 cert1-rc3
    digium certified asterisk 13.1 cert7
    digium certified asterisk 13.8 cert2
    digium certified asterisk 13.13 cert1-rc1
    digium certified asterisk 13.13 cert5
    digium certified asterisk 13.13 cert7
    digium certified asterisk 13.18 cert1-rc3
    digium certified asterisk 13.21 cert1-rc1
    digium certified asterisk 13.18 cert4
    digium certified asterisk 1.8.15 cert2
    digium certified asterisk 1.8.28 cert5
    digium certified asterisk 11.6 cert14-rc1
    digium certified asterisk 13.1 cert3
    digium certified asterisk 13.1 cert3-rc1
    digium certified asterisk 13.1 cert4
    digium certified asterisk 13.1 cert5
    digium certified asterisk 13.8 cert2-rc1
    digium certified asterisk 13.8 cert3
    digium certified asterisk 13.8 cert4
    digium certified asterisk 13.13 cert9
    digium certified asterisk 13.13-cert2
    digium certified asterisk 13.18 cert1
    digium certified asterisk 13.18 cert1-rc1
    digium certified asterisk 1.8.8.0 rc4
    digium certified asterisk 1.8.11 cert3-rc1
    digium certified asterisk 1.8.28 cert2
    digium certified asterisk 1.8.28 cert3
    digium certified asterisk 13.1 cert1-rc1
    digium certified asterisk 13.1 cert6
    digium certified asterisk 13.1 cert8
    digium certified asterisk 13.13 cert1-rc2
    digium certified asterisk 13.13 cert6
    digium certified asterisk 13.13 cert8
    digium certified asterisk 13.18 cert1-rc2
    digium certified asterisk 13.21 cert1
    digium asterisk *
    digium asterisk *
    digium asterisk *
    debian debian linux 8.0
    debian debian linux 9.0