جزئیات آسیب‌پذیری

CVE-2026-57191

asterisk asteriskasterisk certified-asterisk

Asterisk: Stack buffer overflow in MWI NOTIFY Message-Account parsing

CVSS 4.0

8.2بالا

نمای کلی اکسپلویت‌های عمومی اخبار مرتبط خط زمانی

خلاصه‌ی فارسی

خلاصه‌ی فارسی برای این آسیب‌پذیری هنوز تهیه نشده است.

شرح رسمی (انگلیسی)

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an unbounded `sscanf` in `res_pjsip_pubsub` when parsing the `MWI NOTIFY` `Message-Account` field may allow an unauthenticated attacker to send a carefully crafted packet that causes a stack buffer overflow and corrupts the underlying transport, permanently disabling all SIP functionality. An Asterisk restart is required to restore full operation. This issue is fixed in Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3.

امتیازهای CVSS

امتیاز	نسخه	منبع	بردار
8.2بالا	4.0	CVEProject cvelistV5 (CNA) (GitHub_M)	`CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N`

محصولات آسیب‌پذیر

فروشنده	محصول	نسخه‌ها	منبع
asterisk	asterisk	< 20.20.1	CVEProject cvelistV5 (CNA)
asterisk	asterisk	>= 21.0.0-pre1, < 21.12.3	CVEProject cvelistV5 (CNA)
asterisk	asterisk	>= 22.0.0-pre1, < 22.10.1	CVEProject cvelistV5 (CNA)
asterisk	asterisk	>= 23.0.0-pre1, < 23.4.1	CVEProject cvelistV5 (CNA)
asterisk	certified-asterisk	< 20.7-cert11	CVEProject cvelistV5 (CNA)
asterisk	certified-asterisk	>= 22.8-cert1-pre1, < 22.8-cert3	CVEProject cvelistV5 (CNA)

منابع و راهنماها

۱۵

https://github.com/asterisk/asterisk/security/advisories/GHSA-589g-qgf8-m6mx x_refsource_CONFIRM
https://github.com/asterisk/asterisk/commit/0e89514084490070c5ecee419ec5ee37b7c49528 x_refsource_MISC
https://github.com/asterisk/asterisk/commit/647b35c3cfd4a2cc3b1fb7560b085feba5c24b4b x_refsource_MISC
https://github.com/asterisk/asterisk/commit/7a1ffcdf38cc76d1c4eae51651667f3fd4548ab0 x_refsource_MISC
https://github.com/asterisk/asterisk/commit/b4be3bd67ce4ac35b94fbfa860cdd9e1c906610b x_refsource_MISC
https://github.com/asterisk/asterisk/commit/b5281828dad7d44658439ba6393fe6be3328a4bd x_refsource_MISC
https://github.com/asterisk/asterisk/commit/dca516f6d895e8867d48fa56b6ce7f05b6f7457a x_refsource_MISC
https://github.com/asterisk/asterisk/commit/ee1b66a5e40733ba0b9fad7fc4d032cabbe1dd75 x_refsource_MISC
https://github.com/asterisk/asterisk/releases/tag/20.20.1 x_refsource_MISC
https://github.com/asterisk/asterisk/releases/tag/21.12.3 x_refsource_MISC
https://github.com/asterisk/asterisk/releases/tag/22.10.1 x_refsource_MISC
https://github.com/asterisk/asterisk/releases/tag/23.4.1 x_refsource_MISC
https://github.com/asterisk/asterisk/releases/tag/certified-20.7-cert11 x_refsource_MISC
https://github.com/asterisk/asterisk/releases/tag/certified-22.8-cert3 x_refsource_MISC
https://github.com/asterisk/asterisk/tree/24.0.0-pre1 x_refsource_MISC

اطلاعات

تاریخ انتشار: ۱۴۰۵/۰۸/۰۶
آخرین به‌روزرسانی: ۱۴۰۵/۰۸/۱۱
وضعیت: PUBLISHED
صادرکننده (CNA): GitHub_M
اولویت کلون: به‌زودی

پیش‌بینی بهره‌برداری (EPSS)

۰٫۵۹٪

احتمال بهره‌برداری در ۳۰ روز

۴۸٫۳٪

صدک (نسبت به همه‌ی CVEها)

ارزیابی SSVC (CISA)

Automatable: yes
Exploitation: none
Technical Impact: partial

ضعف‌ها (CWE)

CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CWE-787
Out-of-bounds Write