Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2025-54995

Asterisk remotely exploitable leak of RTP UDP ports and internal resources

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
GitHub_M

Description

Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 18.26.4 and 18.9-cert17, RTP UDP ports and internal resources can leak due to a lack of session termination. This could result in leaks and resource exhaustion. This issue has been patched in versions 18.26.4 and 18.9-cert17.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

asterisk asterisk

  • < 18.26.4affected
  • < 18.9-cert17affected

References