chan_iax2.c in the IAX2 channel driver in Certified Asterisk 1.8.11-cert before 1.8.11-cert2 and Asterisk Open Source 1.8.x before 1.8.12.1 and 10.x before 10.4.1, when a certain mohinterpret setting. Rated low severity (CVSS 2.6), this vulnerability is remotely exploitable. No vendor patch available.
Authentication Bypass
Denial Of Service
Debian
Debian Linux
Asterisk
+2
NVD
CVSS 2.0
2.6
EPSS
4.3%