{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/certified-asterisk--20.7-cert11--22.8-cert3/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:asterisk:asterisk:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.5,"id":"CVE-2026-57201"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Asterisk (\u003c 20.20.1, \u003c 21.12.3, \u003c 22.10.1, \u003c 23.4.1)","Certified Asterisk (\u003c 20.7-cert11, \u003c 22.8-cert3)"],"_cs_severities":["low"],"_cs_tags":["denial-of-service","buffer-overflow","telephony"],"_cs_type":"advisory","_cs_vendors":["Asterisk"],"content_html":"\u003cp\u003eA vulnerability (CVE-2026-57201) exists in the Asterisk \u003ccode\u003echan_ooh323\u003c/code\u003e module's \u003ccode\u003eooTrace()\u003c/code\u003e function. The function utilizes an unbounded \u003ccode\u003evsprintf\u003c/code\u003e call to write data into a fixed 2048-byte stack buffer. A remote, unauthenticated attacker can trigger a crash of the Asterisk process by sending a specially crafted H.323 packet.\u003c/p\u003e\n\u003cp\u003eThis vulnerability only affects deployments where the \u003ccode\u003echan_ooh323\u003c/code\u003e addon channel driver is explicitly compiled, installed, and exposed to the network.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation results in a denial-of-service (DoS) condition, crashing the Asterisk telephony process.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade Asterisk to version 20.20.1, 21.12.3, 22.10.1, 23.4.1 or later.\u003c/li\u003e\n\u003cli\u003eUpgrade Certified Asterisk to version 20.7-cert11, 22.8-cert3 or later.\u003c/li\u003e\n\u003cli\u003eIf upgrading is not immediately possible, disable the \u003ccode\u003echan_ooh323\u003c/code\u003e module if it is not required for business operations.\u003c/li\u003e\n\u003cli\u003eRestrict network access to H.323 listening ports via firewall rules to ensure only trusted sources can reach the service.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-27T18:06:04Z","date_published":"2026-10-27T18:06:04Z","id":"https://feed.craftedsignal.io/briefs/2026-10-asterisk-stack-buffer-overflow/","summary":"A stack buffer overflow in the Asterisk chan_ooh323 module allows a remote attacker to crash the telephony process via a crafted H.323 packet.","title":"Asterisk: H.323 channel driver stack buffer overflow (CVE-2026-57201)","url":"https://feed.craftedsignal.io/briefs/2026-10-asterisk-stack-buffer-overflow/"}],"language":"en","title":"CraftedSignal Threat Feed - Certified Asterisk (\u003c 20.7-Cert11, \u003c 22.8-Cert3)","version":"https://jsonfeed.org/version/1.1"}