Vulnerability CVE-2020-35776

Vulnerability Name:

CVE-2020-35776 (CCN-197043)

Assigned:

2020-12-28

Published:

2020-12-28

Updated:

2021-02-24

Summary:

A buffer overflow in res_pjsip_diversion.c in Sangoma Asterisk versions 13.38.1, 16.15.1, 17.9.1, and 18.1.1 allows remote attacker to crash Asterisk by deliberately misusing SIP 181 responses.

CVSS v3 Severity:

6.5 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
5.7 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): Required
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): High

7.5 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
6.5 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): High

CVSS v2 Severity:

4.3 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Authentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Partial

7.8 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Complete

Vulnerability Type:

CWE-120

Vulnerability Consequences:

Denial of Service

References:

Source: MITRE
Type: CNA
CVE-2020-35776

Source: MISC
Type: Patch, Third Party Advisory
http://packetstormsecurity.com/files/161470/Asterisk-Project-Security-Advisory-AST-2021-001.html

Source: FULLDISC
Type: Mailing List, Third Party Advisory
20210218 AST-2021-001: Remote crash in res_pjsip_diversion

Source: CCN
Type: Asterisk Project Security Advisory - AST-2021-001
Remote crash in res_pjsip_diversion

Source: CONFIRM
Type: Vendor Advisory
https://downloads.asterisk.org/pub/security/AST-2021-001.html

Source: XF
Type: UNKNOWN
asterisk-cve202035776-dos(197043)

Source: MISC
Type: Issue Tracking, Vendor Advisory
https://issues.asterisk.org/

Source: CONFIRM
Type: Exploit, Issue Tracking, Patch, Vendor Advisory
https://issues.asterisk.org/jira/browse/ASTERISK-29227

Source: CCN
Type: WhiteSource Vulnerability Database
CVE-2020-35776

Vulnerable Configuration:

Configuration 1:

cpe:/a:digium:asterisk:*:*:*:*:*:*:*:* (Version >= 13.0.0 and <= 13.38.1)

OR cpe:/a:digium:asterisk:*:*:*:*:*:*:*:* (Version >= 16.0.0 and <= 16.15.1)

OR cpe:/a:digium:asterisk:*:*:*:*:*:*:*:* (Version >= 17.0.0 and <= 17.9.1)

OR cpe:/a:digium:asterisk:*:*:*:*:*:*:*:* (Version >= 18.0 and <= 18.1.1)

Denotes that component is vulnerable

BACK