CVE-2015-1558
EPSS 3.0%
Description
Asterisk Open Source 12.x before 12.8.1 and 13.x before 13.1.1, when using the PJSIP channel driver, does not properly reclaim RTP ports, which allows remote authenticated users to cause a denial of service (file descriptor consumption) via an SDP offer containing only incompatible codecs.
How to fix CVE-2015-1558
To remediate CVE-2015-1558, upgrade the affected package to a fixed version below.
- Debian/asterisk—upgrade to 1:13.1.0~dfsg-1.1 or later
Is CVE-2015-1558 being exploited?
Low — EPSS is 3.0%, meaning exploitation activity has not been observed at scale.
Affected packages (1)
- from 0, < 1:13.1.0~dfsg-1.1