—–BEGIN PGP SIGNED MESSAGE—–
Hash: SHA256
===========================================================================
AUSCERT External Security Bulletin Redistribution
ESB-2023.3868
Heap buffer overflow when decoding STUN message in pjproject
(GHSA-4xjp-22g4-9fxm)
10 July 2023
===========================================================================
AusCERT Security Bulletin Summary
———————————
Product: Asterisk
Publisher: Asterisk
Operating System: UNIX variants (UNIX, Linux, OSX)
Resolution: Patch/Upgrade
CVE Names: CVE-2022-23537
Original Bulletin:
https://github.com/asterisk/asterisk/security/advisories/GHSA-4xjp-22g4-9fxm
Comment: CVSS (Max): 6.5 CVE-2022-23537 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H)
CVSS Source: Asterisk
Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H
– ————————–BEGIN INCLUDED TEXT——————–
Heap buffer overflow when decoding STUN message in pjproject
Moderate
gtjoseph published GHSA-4xjp-22g4-9fxm Jul 7, 2023
Package Affected versions Patched versions
Asterisk 16.30.0 and prior 16.30.1
18.18.0 and prior 18.18.1
19.8.0 and prior 19.8.1
20.3.0 and prior 20.3.1
Certified Asterisk certified-18.9-cert4 and prior certified-18.9-cert5
Description
Impact
Possible buffer overread when parsing a specially crafted STUN message with
unknown attribute. The vulnerability affects Asterisk users using ICE and/or
WebRTC.
Patches
The patch is available in the following releases
Asterisk Version Commit
Asterisk 16 https://github.com/asterisk/asterisk/releases/tag/16.30.1
Asterisk 18 https://github.com/asterisk/asterisk/releases/tag/18.18.1
Asterisk 19 https://github.com/asterisk/asterisk/releases/tag/19.8.1
Asterisk 20 https://github.com/asterisk/asterisk/releases/tag/20.3.1
Certified Asterisk https://github.com/asterisk/asterisk/releases/tag/
18.9 certified-18.9-cert5
Additional Information
o There are also some pjproject SSL/TLS fixes included in this release that
aren’t considered security related but could affect stability.
o The Certified Asterisk release also contains multiple fixes accumulated
since the release of cert4.
References
https://github.com/pjsip/pjproject/releases/tag/2.13.1
GHSA-9pfh-r8x4-w26w
GHSA-cxwq-5g9x-x7fr
Severity
Moderate
6.5/ 10
CVSS base metrics
Attack vector Network
Attack complexity High
Privileges required None
User interaction None
Scope Unchanged
Confidentiality Low
Integrity None
Availability High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H
CVE ID
CVE-2022-23537
– ————————–END INCLUDED TEXT——————–
You have received this e-mail bulletin as a result of your organisation’s
registration with AusCERT. The mailing list you are subscribed to is
maintained within your organisation, so if you do not wish to continue
receiving these bulletins you should contact your local IT manager. If
you do not know who that is, please send an email to [email protected]
and we will forward your request to the appropriate person.
NOTE: Third Party Rights
This security bulletin is provided as a service to AusCERT’s members. As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content. The decision to follow or act on information or advice
contained in this security bulletin is the responsibility of each user or
organisation, and should be considered in accordance with your organisation’s
site policies and procedures. AusCERT takes no responsibility for consequences
which may arise from following or acting on information or advice contained in
this security bulletin.
NOTE: This is only the original release of the security bulletin. It may
not be updated when updates to the original are made. If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the author’s website to ensure that the information is still current.
Contact information for the authors of the original document is included
in the Security Bulletin above. If you have any questions or need further
information, please contact them directly.
Previous advisories and external security bulletins can be retrieved from:
https://www.auscert.org.au/bulletins/
===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072
Internet Email: [email protected]
Facsimile: (07) 3365 7031
Telephone: (07) 3365 4417 (International: +61 7 3365 4417)
AusCERT personnel answer during Queensland business hours
which are GMT+10:00 (AEST).
On call after hours for member emergencies only.
===========================================================================
—–BEGIN PGP SIGNATURE—–
Comment: https://auscert.org.au/gpg-key/
iQIVAwUBZKt5A8kNZI30y1K9AQj1wg/+KGmwNfZaDO70epVusXXWKFmmzF7DRfZg
H9Qy4iCagCIoX9TAWR08ET+Cm1cKgpLQeOaq4B+h3YbWaV//8pMaySB+mevwk3oa
SWfDXZehV+L7ARNeqmhn6nLLCq3Jr77Ww6lvITFCsJtrbiYl9I7sD1sVj6s4S0f1
MoovX9r2kSGq+AC0G+ONrt8WEpgJQDgpCNdD6pb7ZgXOG0rnKoFAhmpWnYSusRgl
AD385jCqeIFOAatu5OTBVAeSowtFSuziwnhlGRpqXX3JvwwQ/HmLzGBLqaKVVOLH
1rLut4IFM+sgBmRfkOeBKoCUopYEnfvWEMtwzDqTRO9TPAyNptcqCvCtjNkQz1lH
mTan5ob8V7oGscldAihzFJHY2By/dx8iCIPwti4krJkDZbTl2KHh72YiZvjJfy8l
qybJpRl8mB/lQsahnkGfBQfVR6PY74cPEVQxKl+nDdP7mAYyye6qSgXWOw40PZpV
UDjFmOXkUKX/55d78Hp6WpbShDavRllNk8meUIiBRwoU9DcNid5K5+m+Rv6+E2Oz
0GawAAGcYn0zP7M9E167jxFbXjb5YtMeYKsxEcd2G9qVqPhCVUkGx4fYjzEmZ/t9
biS0bRC5DPNUD1qedVQyOnVPYGeZzqx/L7g4eH7j5o2EhlNUw8K+xQNy9WyZbLUu
LcF+cPNBZmY=
=zETe
—–END PGP SIGNATURE—–
Source: Read More
Security Bulletins