Live › vulnerability › CVE-2026-57184
Go to dashboardAn out-of-bounds read in the Q.931 information-element parser of Asterisk's chan_ooh323 H.323 channel driver lets an unauthenticated remote attacker crash Asterisk with crafted setup packets. The impact is denial of service, not code execution, as far as the sources state.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 20:50 UTC. All times on this page are UTC.
Only systems where the chan_ooh323 addon driver was explicitly compiled and installed, since it is not a default build, and whose H.323 port is publicly reachable. Deployments without chan_ooh323, or with it kept off the public internet, can skip this.
No product ranges from the sources yet.
asterisk -rx "module show like ooh323" to see whether chan_ooh323 is loadedls /usr/lib/asterisk/modules | grep ooh323)20.20.1, 21.12.3, 22.10.1 or 23.4.120.7-cert11 or 22.8-cert3Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, insufficient bounds checking in the chan_ooh323 Q.931 information-element parser permits an out-of-bounds read that may allow an unauthenticated attacker to crash Asterisk using carefully crafted setup packets. The chan_ooh323 addon channel driver must be explicitly compiled and installed, which is not the default, and its port must be publicly reachable. This issue is fixed in Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3.
This page as .md · .json · in your agent: get_signal("CVE-2026-57184")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.