Asterisk is an open source private branch exchange and telephony toolkit. In Asterisk versions 18.20.0 and prior, 20.5.0 and prior, and 21.0.0; as well as ceritifed-asterisk 18.9-cert5 and prior, the 'update' functionality of the PJSIP_HEADER dialplan function can exceed the available buffer space for storing the new value of a header. By doing so this can overwrite memory or cause a crash. This is not externally exploitable, unless dialplan is explicitly written to update a header based on data from an outside source. If the 'update' functionality is not used the vulnerability does not occur. A patch is available at commit a1ca0268254374b515fa5992f01340f7717113fa.
{ "vanir_signatures": [ { "deprecated": false, "signature_type": "Line", "source": "https://github.com/asterisk/asterisk/commit/a1ca0268254374b515fa5992f01340f7717113fa", "signature_version": "v1", "id": "CVE-2023-37457-d5969b49", "digest": { "threshold": 0.9, "line_hashes": [ "159548957906824277854538295288850676053", "239929051654971719448622866075717330742", "327544480914766547304774939153046282095", "22037373518915781682818387149426104403", "52582478101052646613052143770202268734", "13260270649188225194790817830413265206", "155712923347818368736013152122905932088", "122054581060142298997311705906553735862" ] }, "target": { "file": "res/res_pjsip_header_funcs.c" } }, { "deprecated": false, "signature_type": "Function", "source": "https://github.com/asterisk/asterisk/commit/a1ca0268254374b515fa5992f01340f7717113fa", "signature_version": "v1", "id": "CVE-2023-37457-f3766f08", "digest": { "function_hash": "35050234152473757146456454412151458523", "length": 683.0 }, "target": { "function": "update_header", "file": "res/res_pjsip_header_funcs.c" } } ] }