Cpe:2.3:a:asterisk:asterisk:*:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3aasteriskasterisk/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioTue, 27 Oct 2026 18:06:04 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgAsterisk: H.323 channel driver stack buffer overflow (CVE-2026-57201)https://feed.craftedsignal.io/briefs/2026-10-asterisk-stack-buffer-overflow/Tue, 27 Oct 2026 18:06:04 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-asterisk-stack-buffer-overflow/A stack buffer overflow in the Asterisk chan_ooh323 module allows a remote attacker to crash the telephony process via a crafted H.323 packet.A vulnerability (CVE-2026-57201) exists in the Asterisk chan_ooh323 module's ooTrace() function. The function utilizes an unbounded vsprintf call to write data into a fixed 2048-byte stack buffer. A remote, unauthenticated attacker can trigger a crash of the Asterisk process by sending a specially crafted H.323 packet.

This vulnerability only affects deployments where the chan_ooh323 addon channel driver is explicitly compiled, installed, and exposed to the network.

Impact

Successful exploitation results in a denial-of-service (DoS) condition, crashing the Asterisk telephony process.

Recommendation

  • Upgrade Asterisk to version 20.20.1, 21.12.3, 22.10.1, 23.4.1 or later.
  • Upgrade Certified Asterisk to version 20.7-cert11, 22.8-cert3 or later.
  • If upgrading is not immediately possible, disable the chan_ooh323 module if it is not required for business operations.
  • Restrict network access to H.323 listening ports via firewall rules to ensure only trusted sources can reach the service.
]]>lowadvisorydenial-of-servicebuffer-overflowtelephony