What’s Vulnerable › Vulnerabilities

CVE-2019-15639

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 21.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-09-09 · updated 2026-06-17
• Weakness: CWE-20

Description

main/translate.c in Sangoma Asterisk 13.28.0 and 16.5.0 allows a remote attacker to send a specific RTP packet during a call and cause a crash in a specific scenario.

Affected products

• Digium Asterisk: from 13.0.0 through 13.28.0; from 16.0.0 through 16.5.0

References

• http://downloads.asterisk.org/pub/security/AST-2019-005.html
• http://packetstormsecurity.com/files/154372/Asterisk-Project-Security-Advisory-AST-2019-005.html
• http://downloads.asterisk.org/pub/security/AST-2019-005.html
• http://packetstormsecurity.com/files/154372/Asterisk-Project-Security-Advisory-AST-2019-005.html

Get alerted when CVE-2019-15639 or the next vulnerability affects your stack