Package: asterisk Version: 1:16.2.1~dfsg-1 Severity: important Tags: security upstream Forwarded: https://issues.asterisk.org/jira/browse/ASTERISK-28447
Hi, The following vulnerability was published for asterisk. CVE-2019-12827[0]: | Buffer overflow in res_pjsip_messaging in Digium Asterisk versions | 13.21-cert3, 13.27.0, 15.7.2, 16.4.0 and earlier allows remote | authenticated users to crash Asterisk by sending a specially crafted | SIP MESSAGE message. If you fix the vulnerability please also make sure to include the CVE (Common Vulnerabilities & Exposures) id in your changelog entry. For further information see: [0] https://security-tracker.debian.org/tracker/CVE-2019-12827 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12827 [1] https://issues.asterisk.org/jira/browse/ASTERISK-28447 [2] https://downloads.asterisk.org/pub/security/AST-2019-002.html Please adjust the affected versions in the BTS as needed. Regards, Salvatore
