Intrusion PreventionDigium.Asterisk.PJSIP.In-Dialog.MESSAGE.Request.DoS
Description
This indicates an attack attempt to exploit a Denial of Service Vulnerability in Digium Certified Asterisk.
A remote attacker could exploit this vulnerability by sending a crafted MESSAGE request to a vulnerable Asterisk server. Successful exploitation could result in denial-of-service conditions on the Asterisk service.
Affected Products
Digium Asterisk Open Source 13.x prior to 13.27.1
Digium Asterisk Open Source 15.x prior to 15.7.3
Digium Asterisk Open Source 16.x prior to 16.4.1
Digium Certified Asterisk prior to 13.21-cert4
Impact
Denial of Service: Remote attackers can crash vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
http://downloads.asterisk.org/pub/security/AST-2019-002.html
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 48311 |
| Created | Sep 19, 2019 |
| Updated | Oct 21, 2020 |
| Risk |
|
| CVE ID | CVE-2019-12827 |
| Exploit Prediction Score | 4.72% |
| Default Action | drop |
| Active | |
| Affected OS | Linux, BSD |
| Affected App | Other |