svn commit: r518130 - head/security/vuxml

Fri Nov 22 09:03:51 UTC 2019

Author: madpilot
Date: Fri Nov 22 09:03:50 2019
New Revision: 518130
URL: https://svnweb.freebsd.org/changeset/ports/518130

Log:
  Document asterisk vulnerabilities.

Modified:
  head/security/vuxml/vuln.xml

Modified: head/security/vuxml/vuln.xml
==============================================================================

--- head/security/vuxml/vuln.xml	Fri Nov 22 09:01:54 2019	(r518129)
+++ head/security/vuxml/vuln.xml	Fri Nov 22 09:03:50 2019	(r518130)
@@ -58,6 +58,103 @@ Notes:
   * Do not forget port variants (linux-f10-libxml2, libxml2, etc.)
 -->
 <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
+  <vuln vid="94c6951a-0d04-11ea-87ca-001999f8d30b">
+    <topic>asterisk -- Re-invite with T.38 and malformed SDP causes crash</topic>
+    <affects>
+      <package>
+	<name>asterisk13</name>
+	<range><lt>13.29.2</lt></range>
+      </package>
+    </affects>
+    <description>
+      <body xmlns="http://www.w3.org/1999/xhtml">
+	<p>The Asterisk project reports:</p>
+	<blockquote cite="https://www.asterisk.org/downloads/security-advisories">
+	  <p>If Asterisk receives a re-invite initiating T.38 faxing
+	  and has a port of 0 and no c line in the SDP, a crash
+	  will occur.</p>
+	</blockquote>
+      </body>
+    </description>
+    <references>
+      <url>https://downloads.asterisk.org/pub/security/AST-2019-008.html</url>
+      <cvename>CVE-2019-18976</cvename>
+    </references>
+    <dates>
+      <discovery>2019-11-07</discovery>
+      <entry>2019-11-22</entry>
+    </dates>
+  </vuln>
+
+  <vuln vid="49b61ab6-0d04-11ea-87ca-001999f8d30b">
+    <topic>asterisk -- AMI user could execute system commands</topic>
+    <affects>
+      <package>
+	<name>asterisk13</name>
+	<range><lt>13.29.2</lt></range>
+      </package>
+      <package>
+	<name>asterisk16</name>
+	<range><lt>16.6.2</lt></range>
+      </package>
+    </affects>
+    <description>
+      <body xmlns="http://www.w3.org/1999/xhtml">
+	<p>The Asterisk project reports:</p>
+	<blockquote cite="https://www.asterisk.org/downloads/security-advisories">
+	  <p>A remote authenticated Asterisk Manager Interface (AMI)
+	  user without system authorization could use a specially
+	  crafted Originate AMI request to execute arbitrary system
+	  commands.</p>
+	</blockquote>
+      </body>
+    </description>
+    <references>
+      <url>https://downloads.asterisk.org/pub/security/AST-2019-007.html</url>
+      <cvename>CVE-2019-18610</cvename>
+    </references>
+    <dates>
+      <discovery>2019-10-10</discovery>
+      <entry>2019-11-22</entry>
+    </dates>
+  </vuln>
+
+  <vuln vid="a8d94711-0d03-11ea-87ca-001999f8d30b">
+    <topic>asterisk -- SIP request can change address of a SIP peer</topic>
+    <affects>
+      <package>
+	<name>asterisk13</name>
+	<range><lt>13.29.2</lt></range>
+      </package>
+      <package>
+	<name>asterisk16</name>
+	<range><lt>16.6.2</lt></range>
+      </package>
+    </affects>
+    <description>
+      <body xmlns="http://www.w3.org/1999/xhtml">
+	<p>The Asterisk project reports:</p>
+	<blockquote cite="https://www.asterisk.org/downloads/security-advisories">
+	  <p>A SIP request can be sent to Asterisk that can change
+	  a SIP peers IP address. A REGISTER does not need to occur,
+	  and calls can be hijacked as a result. The only thing
+	  that needs to be known is the peers name; authentication
+	  details such as passwords do not need to be known. This
+	  vulnerability is only exploitable when the nat option is
+	  set to the default, or auto_force_rport.</p>
+	</blockquote>
+      </body>
+    </description>
+    <references>
+      <url>https://downloads.asterisk.org/pub/security/AST-2019-006.html</url>
+      <cvename>CVE-2019-18790</cvename>
+    </references>
+    <dates>
+      <discovery>2019-10-17</discovery>
+      <entry>2019-11-22</entry>
+    </dates>
+  </vuln>
+
   <vuln vid="ecb7fdec-0b82-11ea-874d-0c9d925bbbc0">
     <topic>drm graphics drivers -- Local privilege escalation and denial of serivce</topic>
     <affects>
