VYPR
High severity7.5NVD Advisory· Published Feb 18, 2021· Updated Jun 17, 2026

CVE-2021-26712

CVE-2021-26712

Description

Incorrect access controls in res_srtp.c in Sangoma Asterisk 13.38.1, 16.16.0, 17.9.1, and 18.2.0 and Certified Asterisk 16.8-cert5 allow a remote unauthenticated attacker to prematurely terminate secure calls by replaying SRTP packets.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

17
  • cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*
    Range: >=13.0.0,<=13.38.2
  • cpe:2.3:a:digium:certified_asterisk:16.8:-:*:*:*:*:*:*+ 12 more
    • cpe:2.3:a:digium:certified_asterisk:16.8:-:*:*:*:*:*:*
    • cpe:2.3:a:digium:certified_asterisk:16.8:cert1-rc1:*:*:*:*:*:*
    • cpe:2.3:a:digium:certified_asterisk:16.8:cert1-rc2:*:*:*:*:*:*
    • cpe:2.3:a:digium:certified_asterisk:16.8:cert1-rc3:*:*:*:*:*:*
    • cpe:2.3:a:digium:certified_asterisk:16.8:cert1-rc4:*:*:*:*:*:*
    • cpe:2.3:a:digium:certified_asterisk:16.8:cert2:*:*:*:*:*:*
    • cpe:2.3:a:digium:certified_asterisk:16.8:cert3:*:*:*:*:*:*
    • cpe:2.3:a:digium:certified_asterisk:16.8:cert4-rc1:*:*:*:*:*:*
    • cpe:2.3:a:digium:certified_asterisk:16.8:cert4-rc2:*:*:*:*:*:*
    • cpe:2.3:a:digium:certified_asterisk:16.8:cert4-rc3:*:*:*:*:*:*
    • cpe:2.3:a:digium:certified_asterisk:16.8:cert4-rc4:*:*:*:*:*:*
    • cpe:2.3:a:digium:certified_asterisk:16.8:cert4:*:*:*:*:*:*
    • cpe:2.3:a:digium:certified_asterisk:16.8:cert5:*:*:*:*:*:*
  • Sangoma/Asteriskdescription
  • Range: 16.8-cert5
  • Freepbx/Asteriskllm-create
    Range: 13.38.1, 16.16.0, 17.9.1, and 18.2.0

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.