Asterisk: Remote authenticated Denial of Service vulnerability
A vulnerability in Asterisk allows a remote, authenticated attacker to perform a Denial of Service attack.
Triage facts
Revision 1- Applicability
- Asterisk
- Evidence
- Unknown
- Severity
- Medium
- Action
- Elevated
- Sources
- 2 public sources
- Freshness
- Revision 1Oct 27, 17:35 UTC
- Source quality
- A1Likely
What's new
- 1. added coverage for Asterisk Oct 29, 19:48 via bsi
A vulnerability exists in Asterisk that enables a remote, authenticated attacker to trigger a Denial of Service (DoS) condition.
Immediate actions
Inventory all Asterisk server versions
IT Operations
24h
Threat Hunt
Monitor for child processes spawned by the Asterisk service user that are not associated with known telephony functions
T1203
high
medium confidence
hunt now
Data: Endpoint process monitoring (e.g., Auditd, Sysmon for Linux)
Mitigations
Apply available patches from Sangoma for Asterisk once identified
immediate
IT Operations
Asterisk