Use-After-Free Vulnerability in Sangoma Asterisk Products

CVE-2022-42705

What is CVE-2022-42705?

A vulnerability exists within the res_pjsip_pubsub.c module of Sangoma Asterisk, where a use-after-free condition can be exploited by a remote authenticated attacker. By simultaneously engaging in subscription-related activity through a reliable transport, the attacker can trigger a condition that may result in a denial of service, leading to crashes of the Asterisk system. This offers significant risks to usability and service availability for affected organizations.

References