Package: src:asterisk
Severity: serious
Tags: security upstream patch

https://downloads.asterisk.org/pub/security/AST-2021-009.html

Summary:                pjproject/pjsip: crash when SSL socket destroyed during 
handshake
Nature of Advisory:     Denial of service
Susceptibility:         Remote unauthenticated sessions
Severity:               Major
Exploits Known:         Yes

Description
| Depending on the timing, it’s possible for Asterisk to crash when using a TLS
| connection if the underlying socket parent/listener gets destroyed during the
| handshake.

Reply via email to