CVE catalog

CVE-2020-35652

ALPINE-CVE-2020-35652

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
1.88% · Oct 25, 2026

An issue was discovered in res_pjsip_diversion.c in Sangoma Asterisk before 13.38.0, 14.x through 16.x before 16.15.0, 17.x before 17.9.0, and 18.x before 18.1.0. A crash can occur when a SIP message is received with a History-Info header that contains a tel-uri, or when a SIP 181 response is received that contains a tel-uri in the Diversion header.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianasterisk140.1.11-3vulnerable
Debianasterisk140.1.11-3woody1vulnerable
Debianasterisk141:1.0.5-2vulnerable
Debianasterisk141:1.0.5-4vulnerable
Debianasterisk141:1.0.6-1vulnerable
Debianasterisk141:1.0.6-2vulnerable
Debianasterisk141:1.0.7-1vulnerable
Debianasterisk141:1.0.7.dfsg.1-1vulnerable
Debianasterisk141:1.0.7.dfsg.1-2vulnerable
Debianasterisk141:1.0.7.dfsg.1-2sarge1vulnerable
Debianasterisk141:1.0.7.dfsg.1-2sarge2vulnerable
Debianasterisk141:1.0.7.dfsg.1-2sarge3vulnerable
Debianasterisk141:1.0.7.dfsg.1-2sarge4vulnerable
Debianasterisk141:1.0.7.dfsg.1-2sarge5vulnerable
Debianasterisk141:1.0.7.dfsg.1-2sarge6vulnerable
Debianasterisk141:1.0.9.dfsg-1vulnerable
Debianasterisk141:1.0.9.dfsg-3vulnerable
Debianasterisk141:1.0.9.dfsg-4vulnerable
Debianasterisk141:1.0.9.dfsg-5vulnerable
Debianasterisk141:1.0.9.dfsg-6vulnerable
Debianasterisk141:1.2.0-beta1.dfsg-1vulnerable
Debianasterisk141:1.2.0-beta2.dfsg-1vulnerable
Debianasterisk141:1.2.0-beta2.dfsg-2vulnerable
Debianasterisk141:1.2.0-beta2.dfsg-3vulnerable
Debianasterisk141:1.2.0-rc1.dfsg-1vulnerable
Debianasterisk141:1.2.0-rc2.dfsg-1vulnerable
Debianasterisk141:1.2.0.dfsg-1vulnerable
Debianasterisk141:1.2.0.dfsg-2vulnerable
Debianasterisk141:1.2.0.dfsg-3vulnerable
Debianasterisk141:1.2.0.dfsg-4vulnerable
Debianasterisk141:1.2.0.dfsg-5vulnerable
Debianasterisk141:1.2.0.dfsg-6vulnerable
Debianasterisk141:1.2.1.dfsg-1vulnerable
Debianasterisk141:1.2.1.dfsg-2vulnerable
Debianasterisk141:1.2.1.dfsg-3vulnerable
Debianasterisk141:1.2.10.dfsg-1vulnerable
Debianasterisk141:1.2.10.dfsg-1bpo1vulnerable
Debianasterisk141:1.2.10.dfsg-2vulnerable
Debianasterisk141:1.2.10.dfsg-3vulnerable
Debianasterisk141:1.2.11.dfsg-1vulnerable
Debianasterisk141:1.2.12.1.dfsg-1vulnerable
Debianasterisk141:1.2.13~dfsg-1vulnerable
Debianasterisk141:1.2.13~dfsg-2vulnerable
Debianasterisk141:1.2.13~dfsg-2etch1vulnerable
Debianasterisk141:1.2.13~dfsg-2etch2vulnerable
Debianasterisk141:1.2.13~dfsg-2etch3vulnerable
Debianasterisk141:1.2.13~dfsg-2etch4vulnerable
Debianasterisk141:1.2.14~dfsg-1vulnerable
Debianasterisk141:1.2.14~dfsg-2vulnerable
Debianasterisk141:1.2.14~dfsg-3vulnerable
Debianasterisk141:1.2.14~dfsg-4vulnerable
Debianasterisk141:1.2.15~dfsg-1vulnerable
Debianasterisk141:1.2.16~dfsg-1vulnerable
Debianasterisk141:1.2.17~dfsg-1vulnerable
Debianasterisk141:1.2.4.dfsg-1vulnerable
Debianasterisk141:1.2.4.dfsg-2vulnerable
Debianasterisk141:1.2.4.dfsg-3vulnerable
Debianasterisk141:1.2.4.dfsg-4vulnerable
Debianasterisk141:1.2.4.dfsg-5vulnerable
Debianasterisk141:1.2.4.dfsg-6vulnerable
Debianasterisk141:1.2.4.dfsg-6+b1vulnerable
Debianasterisk141:1.2.4.dfsg-7vulnerable
Debianasterisk141:1.2.7.1.dfsg-1vulnerable
Debianasterisk141:1.2.7.1.dfsg-2vulnerable
Debianasterisk141:1.2.7.1.dfsg-3vulnerable
Debianasterisk141:1.2.9.1.dfsg-1vulnerable
Debianasterisk141:1.4.10~dfsg-1vulnerable
Debianasterisk141:1.4.11~dfsg-1vulnerable
Debianasterisk141:1.4.11~dfsg-2vulnerable
Debianasterisk141:1.4.11~dfsg-3vulnerable
Debianasterisk141:1.4.11~dfsg-4vulnerable
Debianasterisk141:1.4.13~dfsg-1vulnerable
Debianasterisk141:1.4.15~dfsg-1vulnerable
Debianasterisk141:1.4.16.2~dfsg-1vulnerable
Debianasterisk141:1.4.16.2~dfsg-2vulnerable
Debianasterisk141:1.4.17~dfsg-1vulnerable
Debianasterisk141:1.4.17~dfsg-2vulnerable
Debianasterisk141:1.4.18.1~dfsg-1vulnerable
Debianasterisk141:1.4.18~dfsg-1vulnerable
Debianasterisk141:1.4.19.1~dfsg-1vulnerable
Debianasterisk141:1.4.20~dfsg-1vulnerable
Debianasterisk141:1.4.21.1~dfsg-1vulnerable
Debianasterisk141:1.4.21.2~dfsg-1vulnerable
Debianasterisk141:1.4.21.2~dfsg-2vulnerable
Debianasterisk141:1.4.21.2~dfsg-3vulnerable
Debianasterisk141:1.4.21.2~dfsg-3+lenny1vulnerable
Debianasterisk141:1.4.21.2~dfsg-3+lenny2vulnerable
Debianasterisk141:1.4.21.2~dfsg-3+lenny2.1vulnerable
Debianasterisk141:1.4.21.2~dfsg-3+lenny3vulnerable
Debianasterisk141:1.4.21.2~dfsg-3+lenny5vulnerable
Debianasterisk141:1.4.21.2~dfsg-3+lenny6vulnerable
Debianasterisk141:1.4.21.2~dfsg-3.1vulnerable
Debianasterisk141:1.4.2~dfsg-1vulnerable
Debianasterisk141:1.4.2~dfsg-2vulnerable
Debianasterisk141:1.4.2~dfsg-3vulnerable
Debianasterisk141:1.4.2~dfsg-4vulnerable
Debianasterisk141:1.4.2~dfsg-5vulnerable
Debianasterisk141:1.4.3~dfsg-1vulnerable
Debianasterisk141:1.4.4~dfsg-1vulnerable
Debianasterisk141:1.4.4~dfsg-2vulnerable
Debianasterisk141:1.4.4~dfsg-3vulnerable
Debianasterisk141:1.4.5~dfsg-1vulnerable
Debianasterisk141:1.4.6~dfsg-1vulnerable
Debianasterisk141:1.4.8~dfsg-1vulnerable
Debianasterisk141:1.4.8~dfsg-2vulnerable
Debianasterisk141:1.4.9~dfsg-1vulnerable
Debianasterisk141:1.6.1.0~dfsg-1vulnerable
Debianasterisk141:1.6.1.0~dfsg~rc3-1vulnerable
Debianasterisk141:1.6.2.0-1vulnerable
Debianasterisk141:1.6.2.0~dfsg~beta3-1vulnerable
Debianasterisk141:1.6.2.0~dfsg~rc1-1vulnerable
Debianasterisk141:1.6.2.0~rc3-1vulnerable
Debianasterisk141:1.6.2.0~rc3-2vulnerable
Debianasterisk141:1.6.2.0~rc6-1vulnerable
Debianasterisk141:1.6.2.0~rc7-1vulnerable
Debianasterisk141:1.6.2.2-1vulnerable
Debianasterisk141:1.6.2.6-1vulnerable
Debianasterisk141:1.6.2.7-1vulnerable
Debianasterisk141:1.6.2.9-1vulnerable
Debianasterisk141:1.6.2.9-1~bpo50+1vulnerable
Debianasterisk141:1.6.2.9-1~bpo50+2vulnerable
Debianasterisk141:1.6.2.9-1~bpo50+3vulnerable
Debianasterisk141:1.6.2.9-2vulnerable
Debianasterisk141:1.6.2.9-2+squeeze1vulnerable
Debianasterisk141:1.6.2.9-2+squeeze10vulnerable
Debianasterisk141:1.6.2.9-2+squeeze11vulnerable
Debianasterisk141:1.6.2.9-2+squeeze12vulnerable
Debianasterisk141:1.6.2.9-2+squeeze2vulnerable
Debianasterisk141:1.6.2.9-2+squeeze3vulnerable
Debianasterisk141:1.6.2.9-2+squeeze4vulnerable
Debianasterisk141:1.6.2.9-2+squeeze5vulnerable
Debianasterisk141:1.6.2.9-2+squeeze6vulnerable
Debianasterisk141:1.6.2.9-2+squeeze7vulnerable
Debianasterisk141:1.6.2.9-2+squeeze8vulnerable
Debianasterisk141:1.6.2.9-2+squeeze9vulnerable
Debianasterisk141:1.8.10.0~dfsg-1vulnerable
Debianasterisk141:1.8.10.1~dfsg-1vulnerable
Debianasterisk141:1.8.11.1~dfsg-1vulnerable
Debianasterisk141:1.8.13.0~dfsg-1vulnerable
Debianasterisk141:1.8.13.0~dfsg-1~bpo60+1vulnerable
Debianasterisk141:1.8.13.1~dfsg-1vulnerable
Debianasterisk141:1.8.13.1~dfsg-1+powerpcspe1vulnerable
Debianasterisk141:1.8.13.1~dfsg-1~bpo60+1vulnerable
Debianasterisk141:1.8.13.1~dfsg-2vulnerable
Debianasterisk141:1.8.13.1~dfsg-3vulnerable
Debianasterisk141:1.8.3.3-1vulnerable
Debianasterisk141:1.8.4-1vulnerable
Debianasterisk141:1.8.4.2-1vulnerable
Debianasterisk141:1.8.4.3-1vulnerable
Debianasterisk141:1.8.4.4~dfsg-1vulnerable
Debianasterisk141:1.8.4.4~dfsg-2vulnerable
Debianasterisk141:1.8.7.1~dfsg-1vulnerable
Debianasterisk141:1.8.7.1~dfsg-2vulnerable
Debianasterisk141:1.8.7.1~dfsg-3vulnerable
Debianasterisk141:1.8.8.0~dfsg-1vulnerable
Debianasterisk141:1.8.8.2~dfsg-1vulnerable
Debianasterisk141:11.10.0~dfsg-1vulnerable
Debianasterisk141:11.10.0~dfsg-1~bpo70+1vulnerable
Debianasterisk141:11.10.2~dfsg-1vulnerable
Debianasterisk141:11.10.2~dfsg-1~bpo70+1vulnerable
Debianasterisk141:11.11.0~dfsg-1vulnerable
Debianasterisk141:11.11.0~dfsg-1~bpo70+1vulnerable
Debianasterisk141:11.11.0~dfsg-2vulnerable
Debianasterisk141:11.12.0~dfsg-1vulnerable
Debianasterisk141:11.12.0~dfsg-1~bpo70+1vulnerable
Debianasterisk141:11.12.1~dfsg-1vulnerable
Debianasterisk141:11.13.0~dfsg-1vulnerable
Debianasterisk141:11.13.0~dfsg-1~bpo70+1vulnerable
Debianasterisk141:11.13.1~dfsg-1vulnerable
Debianasterisk141:11.13.1~dfsg-2vulnerable
Debianasterisk141:11.13.1~dfsg-2~bpo70+1vulnerable
Debianasterisk141:11.5.1~dfsg-1vulnerable
Debianasterisk141:11.5.1~dfsg-2vulnerable
Debianasterisk141:11.5.1~dfsg1-1vulnerable
Debianasterisk141:11.5.1~dfsg1-1~bpo70+1vulnerable
Debianasterisk141:11.6.0~dfsg-1vulnerable
Debianasterisk141:11.6.0~dfsg-2vulnerable
Debianasterisk141:11.6.0~dfsg-3vulnerable
Debianasterisk141:11.7.0~dfsg-1vulnerable
Debianasterisk141:11.7.0~dfsg-1+e1vulnerable
Debianasterisk141:11.7.0~dfsg-1~bpo70+1vulnerable
Debianasterisk141:11.8.0~dfsg-1vulnerable
Debianasterisk141:11.8.0~dfsg-2vulnerable
Debianasterisk141:11.8.1~dfsg-1vulnerable
Debianasterisk141:11.8.1~dfsg-1~bpo70+1vulnerable
Debianasterisk141:11.9.0~dfsg-1vulnerable
Debianasterisk141:11.9.0~dfsg-2vulnerable
Debianasterisk141:11.9.0~dfsg-2~bpo70+1vulnerable
Debianasterisk141:13.0.0~dfsg-1vulnerable
Debianasterisk141:13.0.0~dfsg-2vulnerable
Debianasterisk141:13.1.0~dfsg-1vulnerable
Debianasterisk141:13.1.0~dfsg-1.1vulnerable
Debianasterisk141:13.10.0~dfsg-1vulnerable
Debianasterisk141:13.11.2~dfsg-1vulnerable
Debianasterisk141:13.12.1~dfsg-1vulnerable
Debianasterisk141:13.12.2~dfsg-1vulnerable
Debianasterisk141:13.12.2~dfsg-2vulnerable
Debianasterisk141:13.13.1~dfsg-1vulnerable
Debianasterisk141:13.13.1~dfsg-2vulnerable
Debianasterisk141:13.13.1~dfsg-3vulnerable
Debianasterisk141:13.13.1~dfsg-3~exp1vulnerable
Debianasterisk141:13.13.1~dfsg-4vulnerable
Debianasterisk141:13.14.0~dfsg-1vulnerable
Debianasterisk141:13.14.0~dfsg-1~exp1vulnerable
Debianasterisk141:13.14.1~dfsg-1vulnerable
Debianasterisk141:13.14.1~dfsg-2vulnerable
Debianasterisk141:13.17.0~dfsg-1vulnerable
Debianasterisk141:13.17.0~dfsg-2vulnerable
Debianasterisk141:13.17.1~dfsg-1vulnerable
Debianasterisk141:13.17.2~dfsg-1vulnerable
Debianasterisk141:13.17.2~dfsg-2vulnerable
Debianasterisk141:13.18.1~dfsg-1vulnerable
Debianasterisk141:13.18.3~dfsg-1vulnerable
Debianasterisk141:13.18.5~dfsg-1vulnerable
Debianasterisk141:13.20.0~dfsg-1vulnerable
Debianasterisk141:13.22.0~dfsg-1vulnerable
Debianasterisk141:13.22.0~dfsg-2vulnerable
Debianasterisk141:13.23.1~dfsg-1vulnerable
Debianasterisk141:13.23.1~dfsg-2vulnerable
Debianasterisk141:13.7.2~dfsg-1vulnerable
Debianasterisk141:13.8.0~dfsg-1vulnerable
Debianasterisk141:13.8.2~dfsg-1vulnerable
Debianasterisk141:13.9.1~dfsg-1vulnerable
Debianasterisk141:13.9.1~dfsg-2vulnerable
Debianasterisk141:16.1.0~dfsg-1vulnerable
Debianasterisk141:16.1.0~dfsg-2vulnerable
Debianasterisk141:16.1.0~dfsg-3vulnerable
Debianasterisk141:16.1.0~dfsg-4vulnerable
Debianasterisk141:16.1.1~dfsg-1vulnerable
Debianasterisk141:16.10.0~dfsg-1vulnerable
Debianasterisk141:16.12.0~dfsg-1vulnerable
Debianasterisk141:16.15.0~dfsg-1vulnerable
Debianasterisk141:16.2.0~dfsg-1vulnerable
Debianasterisk141:16.2.1~dfsg-1vulnerable
Debianasterisk141:16.2.1~dfsg-2vulnerable
Debianasterisk141:16.15.1~dfsg-1fixed
Alpineasterisk3.1216.15.1-r0fixed
Alpineasterisk3.1318.1.1-r0fixed
Alpineasterisk3.1418.1.1-r0fixed
Alpineasterisk3.1518.1.1-r0fixed
Alpineasterisk3.1618.1.1-r0fixed
Alpineasterisk3.1718.1.1-r0fixed
Alpineasterisk3.1818.1.1-r0fixed
Alpineasterisk3.1918.1.1-r0fixed
Alpineasterisk3.2018.1.1-r0fixed
Alpineasterisk3.2118.1.1-r0fixed
Alpineasterisk3.2218.1.1-r0fixed
Alpineasterisk3.2318.1.1-r0fixed
Alpineasterisk3.2418.1.1-r0fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianasteriskdeb141:16.15.1~dfsg-1Not reportedDEBIAN-CVE-2020-35652Not reported
Alpineasteriskapk3.1216.15.1-r0Not reportedALPINE-CVE-2020-35652Not reported
Alpineasteriskapk3.1318.1.1-r0Not reportedALPINE-CVE-2020-35652Not reported
Alpineasteriskapk3.1418.1.1-r0Not reportedALPINE-CVE-2020-35652Not reported
Alpineasteriskapk3.1518.1.1-r0Not reportedALPINE-CVE-2020-35652Not reported
Alpineasteriskapk3.1618.1.1-r0Not reportedALPINE-CVE-2020-35652Not reported
Alpineasteriskapk3.1718.1.1-r0Not reportedALPINE-CVE-2020-35652Not reported
Alpineasteriskapk3.1818.1.1-r0Not reportedALPINE-CVE-2020-35652Not reported
Alpineasteriskapk3.1918.1.1-r0Not reportedALPINE-CVE-2020-35652Not reported
Alpineasteriskapk3.2018.1.1-r0Not reportedALPINE-CVE-2020-35652Not reported
Alpineasteriskapk3.2118.1.1-r0Not reportedALPINE-CVE-2020-35652Not reported
Alpineasteriskapk3.2218.1.1-r0Not reportedALPINE-CVE-2020-35652Not reported
Alpineasteriskapk3.2318.1.1-r0Not reportedALPINE-CVE-2020-35652Not reported
Alpineasteriskapk3.2418.1.1-r0Not reportedALPINE-CVE-2020-35652Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References