{"id":"UBUNTU-CVE-2015-1558","details":"Asterisk Open Source 12.x before 12.8.1 and 13.x before 13.1.1, when using the PJSIP channel driver, does not properly reclaim RTP ports, which allows remote authenticated users to cause a denial of service (file descriptor consumption) via an SDP offer containing only incompatible codecs.","modified":"2025-07-16T07:32:40.689173Z","published":"2015-02-09T11:59:00Z","withdrawn":"2025-07-18T16:43:10Z","upstream":["CVE-2015-1558"],"references":[{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2015-1558"},{"type":"REPORT","url":"http://www.securitytracker.com/id/1031661"},{"type":"REPORT","url":"http://seclists.org/fulldisclosure/2015/Jan/116"},{"type":"REPORT","url":"http://downloads.asterisk.org/pub/security/AST-2015-001.html"},{"type":"REPORT","url":"https://www.cve.org/CVERecord?id=CVE-2015-1558"}],"affected":[{"package":{"name":"asterisk","ecosystem":"Ubuntu:16.04:LTS","purl":"pkg:deb/ubuntu/asterisk@1:13.1.0~dfsg-1.1ubuntu4?arch=source&distro=xenial"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:13.1.0~dfsg-1.1ubuntu4"}]}],"versions":["1:13.1.0~dfsg-1.1ubuntu3"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_version":"1:13.1.0~dfsg-1.1ubuntu4","binary_name":"asterisk"},{"binary_name":"asterisk-config","binary_version":"1:13.1.0~dfsg-1.1ubuntu4"},{"binary_name":"asterisk-dahdi","binary_version":"1:13.1.0~dfsg-1.1ubuntu4"},{"binary_name":"asterisk-dahdi-dbgsym","binary_version":"1:13.1.0~dfsg-1.1ubuntu4"},{"binary_name":"asterisk-dbg","binary_version":"1:13.1.0~dfsg-1.1ubuntu4"},{"binary_name":"asterisk-dbgsym","binary_version":"1:13.1.0~dfsg-1.1ubuntu4"},{"binary_name":"asterisk-dev","binary_version":"1:13.1.0~dfsg-1.1ubuntu4"},{"binary_name":"asterisk-doc","binary_version":"1:13.1.0~dfsg-1.1ubuntu4"},{"binary_name":"asterisk-mobile","binary_version":"1:13.1.0~dfsg-1.1ubuntu4"},{"binary_name":"asterisk-mobile-dbgsym","binary_version":"1:13.1.0~dfsg-1.1ubuntu4"},{"binary_name":"asterisk-modules","binary_version":"1:13.1.0~dfsg-1.1ubuntu4"},{"binary_name":"asterisk-modules-dbgsym","binary_version":"1:13.1.0~dfsg-1.1ubuntu4"},{"binary_name":"asterisk-mp3","binary_version":"1:13.1.0~dfsg-1.1ubuntu4"},{"binary_name":"asterisk-mp3-dbgsym","binary_version":"1:13.1.0~dfsg-1.1ubuntu4"},{"binary_name":"asterisk-mysql","binary_version":"1:13.1.0~dfsg-1.1ubuntu4"},{"binary_name":"asterisk-mysql-dbgsym","binary_version":"1:13.1.0~dfsg-1.1ubuntu4"},{"binary_name":"asterisk-ooh323","binary_version":"1:13.1.0~dfsg-1.1ubuntu4"},{"binary_name":"asterisk-ooh323-dbgsym","binary_version":"1:13.1.0~dfsg-1.1ubuntu4"},{"binary_name":"asterisk-voicemail","binary_version":"1:13.1.0~dfsg-1.1ubuntu4"},{"binary_name":"asterisk-voicemail-dbgsym","binary_version":"1:13.1.0~dfsg-1.1ubuntu4"},{"binary_name":"asterisk-voicemail-imapstorage","binary_version":"1:13.1.0~dfsg-1.1ubuntu4"},{"binary_name":"asterisk-voicemail-imapstorage-dbgsym","binary_version":"1:13.1.0~dfsg-1.1ubuntu4"},{"binary_name":"asterisk-voicemail-odbcstorage","binary_version":"1:13.1.0~dfsg-1.1ubuntu4"},{"binary_version":"1:13.1.0~dfsg-1.1ubuntu4","binary_name":"asterisk-voicemail-odbcstorage-dbgsym"},{"binary_name":"asterisk-vpb","binary_version":"1:13.1.0~dfsg-1.1ubuntu4"},{"binary_name":"asterisk-vpb-dbgsym","binary_version":"1:13.1.0~dfsg-1.1ubuntu4"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2015/UBUNTU-CVE-2015-1558.json"}},{"package":{"name":"asterisk","ecosystem":"Ubuntu:18.04:LTS","purl":"pkg:deb/ubuntu/asterisk@1:13.18.3~dfsg-1ubuntu4?arch=source&distro=bionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:13.18.3~dfsg-1ubuntu4"}]}],"versions":["1:13.17.2~dfsg-1ubuntu1","1:13.17.2~dfsg-2ubuntu1","1:13.18.1~dfsg-1ubuntu1","1:13.18.3~dfsg-1ubuntu1","1:13.18.3~dfsg-1ubuntu2","1:13.18.3~dfsg-1ubuntu3"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"asterisk","binary_version":"1:13.18.3~dfsg-1ubuntu4"},{"binary_name":"asterisk-config","binary_version":"1:13.18.3~dfsg-1ubuntu4"},{"binary_name":"asterisk-dahdi","binary_version":"1:13.18.3~dfsg-1ubuntu4"},{"binary_name":"asterisk-dahdi-dbgsym","binary_version":"1:13.18.3~dfsg-1ubuntu4"},{"binary_name":"asterisk-dbgsym","binary_version":"1:13.18.3~dfsg-1ubuntu4"},{"binary_name":"asterisk-dev","binary_version":"1:13.18.3~dfsg-1ubuntu4"},{"binary_name":"asterisk-doc","binary_version":"1:13.18.3~dfsg-1ubuntu4"},{"binary_name":"asterisk-mobile","binary_version":"1:13.18.3~dfsg-1ubuntu4"},{"binary_name":"asterisk-mobile-dbgsym","binary_version":"1:13.18.3~dfsg-1ubuntu4"},{"binary_name":"asterisk-modules","binary_version":"1:13.18.3~dfsg-1ubuntu4"},{"binary_name":"asterisk-modules-dbgsym","binary_version":"1:13.18.3~dfsg-1ubuntu4"},{"binary_name":"asterisk-mp3","binary_version":"1:13.18.3~dfsg-1ubuntu4"},{"binary_version":"1:13.18.3~dfsg-1ubuntu4","binary_name":"asterisk-mp3-dbgsym"},{"binary_name":"asterisk-mysql","binary_version":"1:13.18.3~dfsg-1ubuntu4"},{"binary_name":"asterisk-mysql-dbgsym","binary_version":"1:13.18.3~dfsg-1ubuntu4"},{"binary_name":"asterisk-ooh323","binary_version":"1:13.18.3~dfsg-1ubuntu4"},{"binary_name":"asterisk-ooh323-dbgsym","binary_version":"1:13.18.3~dfsg-1ubuntu4"},{"binary_version":"1:13.18.3~dfsg-1ubuntu4","binary_name":"asterisk-tests"},{"binary_name":"asterisk-tests-dbgsym","binary_version":"1:13.18.3~dfsg-1ubuntu4"},{"binary_name":"asterisk-voicemail","binary_version":"1:13.18.3~dfsg-1ubuntu4"},{"binary_name":"asterisk-voicemail-dbgsym","binary_version":"1:13.18.3~dfsg-1ubuntu4"},{"binary_name":"asterisk-voicemail-imapstorage","binary_version":"1:13.18.3~dfsg-1ubuntu4"},{"binary_name":"asterisk-voicemail-imapstorage-dbgsym","binary_version":"1:13.18.3~dfsg-1ubuntu4"},{"binary_name":"asterisk-voicemail-odbcstorage","binary_version":"1:13.18.3~dfsg-1ubuntu4"},{"binary_name":"asterisk-voicemail-odbcstorage-dbgsym","binary_version":"1:13.18.3~dfsg-1ubuntu4"},{"binary_name":"asterisk-vpb","binary_version":"1:13.18.3~dfsg-1ubuntu4"},{"binary_name":"asterisk-vpb-dbgsym","binary_version":"1:13.18.3~dfsg-1ubuntu4"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2015/UBUNTU-CVE-2015-1558.json"}}],"schema_version":"1.7.3","severity":[{"type":"Ubuntu","score":"medium"}]}