Approved changes feed: RSS · Atom

cpe:2.3:a:asterisk:asterisk:21.3.0:*:*:*:*:*:*:*

part: a version: 21.3.0 update: *

VendorAsterisk (8cf0208b-fb97-57c9-94a0-6da40e548dcd)
ProductAsterisk (95a29321-1bd0-5763-8bc3-5646752cc98c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-35190 vulnerable 2026-06-03 14:55:55.658520 Asterisk' res_pjsip_endpoint_identifier_ip: wrongly matches ALL unauthorized SIP requests
MEDIUM (5.8)
Asterisk is an open source private branch exchange and telephony toolkit. After upgrade to 18.23.0, ALL unauthorized SIP requests are identified as PJSIP Endpoint of local asterisk server. This vulnerability is fixed in 18.23.1, 20.8.1, and 21.3.1.
Published: 2024-05-17T16:55:41.346Z
Updated: 2024-08-02T03:07:46.821Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.