cvedb.io
CVE-2019-7251
MEDIUM · CVSS 6.5
EPSS exploitation probability: 0%
Published 2019-03-28T17:29:01.723 · Last modified 2026-06-17T02:40:19.280

Summary

An Integer Signedness issue (for a return code) in the res_pjsip_sdp_rtp module in Digium Asterisk versions 15.7.1 and earlier and 16.1.1 and earlier allows remote authenticated users to crash Asterisk via a specially crafted SDP protocol violation.

Affected products

digium — asterisk

Does this affect you?

Add your gear to cvedb and we'll alert you only when digium ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.