Asterisk (< 20.20.1, < 21.12.3, < 22.10.1, < 23.4.1)

A stack buffer overflow in the Asterisk chan_ooh323 module allows a remote attacker to crash the telephony process via a crafted H.323 packet.