Total vulnerabilities in the database
ConfBridge in Asterisk 11.x before 11.14.1 and Certified Asterisk 11.6 before 11.6-cert8 does not properly handle state changes, which allows remote attackers to cause a denial of service (channel hang and memory consumption) by causing transitions to be delayed, which triggers a state change from hung up to waiting for media.
| Software | From | Fixed in |
|---|---|---|
| digium / asterisk | - | 11.14.0.x |
| digium / certified_asterisk | 11.6-cert2 | 11.6-cert2.x |
| digium / certified_asterisk | 11.6-cert7 | 11.6-cert7.x |
| digium / certified_asterisk | 11.6-cert4 | 11.6-cert4.x |
| digium / certified_asterisk | 11.6-cert1 | 11.6-cert1.x |
| digium / certified_asterisk | 11.6-cert3 | 11.6-cert3.x |
| digium / certified_asterisk | 11.6-cert6 | 11.6-cert6.x |
| digium / certified_asterisk | 11.6-cert5 | 11.6-cert5.x |
| digium / certified_asterisk | 11.6.0 | 11.6.0.x |