{"id":"CVE-2020-35652","details":"An issue was discovered in res_pjsip_diversion.c in Sangoma Asterisk before 13.38.0, 14.x through 16.x before 16.15.0, 17.x before 17.9.0, and 18.x before 18.1.0. A crash can occur when a SIP message is received with a History-Info header that contains a tel-uri, or when a SIP 181 response is received that contains a tel-uri in the Diversion header.","modified":"2026-07-08T20:42:41.723539Z","published":"2021-01-29T08:15:10.520Z","references":[{"type":"ADVISORY","url":"https://downloads.asterisk.org/pub/security/AST-2020-003.html"},{"type":"ADVISORY","url":"https://downloads.asterisk.org/pub/security/AST-2020-004.html"},{"type":"ADVISORY","url":"https://issues.asterisk.org/jira/browse/ASTERISK-29219"},{"type":"EVIDENCE","url":"https://issues.asterisk.org/jira/browse/ASTERISK-29191"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/asterisk/asterisk","events":[{"introduced":"0"},{"fixed":"f396dd2dd653c368dcf2887a4852bf814c4ae27e"},{"introduced":"c6d6dd133c3db3b202f1f0d457780c9a6d841e0f"},{"fixed":"b240b843312850b724c5a37340d61101a613d8d1"},{"introduced":"5ffe12b6ef30cd503f85d75745fd8d9c2cfafe47"},{"fixed":"e032ae62264b9ac041f0bf5282b3fbc9c327d83a"},{"introduced":"2c1bba3cbec008c8ce35c78a2c79f9f207ea58bc"},{"fixed":"45f9e40e9caa0c557c3e5bf4efa5f0e3b562e2a0"}],"database_specific":{"cpe":"cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"13.38.0"},{"introduced":"14.0"},{"fixed":"16.15.0"},{"introduced":"17.0"},{"fixed":"17.9.0"},{"introduced":"18.0"},{"fixed":"18.1.0"}],"source":"CPE_RANGE"}}],"versions":["18.1.0-rc1","17.9.0-rc1","16.15.0-rc1","13.38.0-rc1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-35652.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}]}