CVE-2026-57186

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-57186", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-06-24T01:47:55.287Z", "datePublished": "2026-10-27T21:21:55.833Z", "dateUpdated": "2026-10-28T16:13:12.086Z"}, "containers": {"cna": {"title": "Asterisk: CVE-2022-37325 fix is absent from current chan_ooh323 Q.931 party-number parser", "problemTypes": [{"descriptions": [{"cweId": "CWE-839", "lang": "en", "description": "CWE-839: Numeric Range Comparison Without Minimum Check", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}}], "references": [{"name": "https://github.com/asterisk/asterisk/security/advisories/GHSA-h5hv-jmgj-92q2", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/asterisk/asterisk/security/advisories/GHSA-h5hv-jmgj-92q2"}, {"name": "https://github.com/asterisk/asterisk/commit/07b9740cbc371ffa7936cf368089fd073250ea7c", "tags": ["x_refsource_MISC"], "url": "https://github.com/asterisk/asterisk/commit/07b9740cbc371ffa7936cf368089fd073250ea7c"}, {"name": "https://github.com/asterisk/asterisk/commit/0e776a837106d5d0d14503a53388337931045164", "tags": ["x_refsource_MISC"], "url": "https://github.com/asterisk/asterisk/commit/0e776a837106d5d0d14503a53388337931045164"}, {"name": "https://github.com/asterisk/asterisk/commit/42d3552d2ac0efbb68c9ec7ade898b6de0bfa033", "tags": ["x_refsource_MISC"], "url": "https://github.com/asterisk/asterisk/commit/42d3552d2ac0efbb68c9ec7ade898b6de0bfa033"}, {"name": "https://github.com/asterisk/asterisk/commit/46c6c652d1de9bfbb061fab0b1f681cf60660998", "tags": ["x_refsource_MISC"], "url": "https://github.com/asterisk/asterisk/commit/46c6c652d1de9bfbb061fab0b1f681cf60660998"}, {"name": "https://github.com/asterisk/asterisk/commit/62a7a7037b1a145cabf95895b119cbae4d3c5a4f", "tags": ["x_refsource_MISC"], "url": "https://github.com/asterisk/asterisk/commit/62a7a7037b1a145cabf95895b119cbae4d3c5a4f"}, {"name": "https://github.com/asterisk/asterisk/releases/tag/21.12.3", "tags": ["x_refsource_MISC"], "url": "https://github.com/asterisk/asterisk/releases/tag/21.12.3"}, {"name": "https://github.com/asterisk/asterisk/releases/tag/22.10.1", "tags": ["x_refsource_MISC"], "url": "https://github.com/asterisk/asterisk/releases/tag/22.10.1"}, {"name": "https://github.com/asterisk/asterisk/releases/tag/23.4.1", "tags": ["x_refsource_MISC"], "url": "https://github.com/asterisk/asterisk/releases/tag/23.4.1"}, {"name": "https://github.com/asterisk/asterisk/releases/tag/certified-22.8-cert3", "tags": ["x_refsource_MISC"], "url": "https://github.com/asterisk/asterisk/releases/tag/certified-22.8-cert3"}, {"name": "https://github.com/asterisk/asterisk/tree/24.0.0-pre1", "tags": ["x_refsource_MISC"], "url": "https://github.com/asterisk/asterisk/tree/24.0.0-pre1"}], "affected": [{"vendor": "asterisk", "product": "asterisk", "versions": [{"version": ">= 21.0.0-pre1, < 21.12.3", "status": "affected"}, {"version": ">= 22.0.0-pre1, < 22.10.1", "status": "affected"}, {"version": ">= 23.0.0-pre1, < 23.4.1", "status": "affected"}]}, {"vendor": "asterisk", "product": "certified-asterisk", "versions": [{"version": ">= 22.8-cert1-pre1, < 22.8-cert3", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-10-27T21:21:55.833Z"}, "descriptions": [{"lang": "en", "value": "Asterisk is an open source private branch exchange and telephony toolkit. From 21.0.0-pre1 until Asterisk 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 22.8-cert3, the `chan_ooh323` `Q.931 party-number parser` lacks the `CVE-2022-37325` fix because that fix was never forward-ported from Asterisk 20 to later versions. Malformed Q.931 elements in an `OOH323 request` can therefore crash Asterisk. This issue affects Asterisk versions greater than 20. The `chan_ooh323` addon channel driver must be explicitly compiled and installed, which is not the default, and its port must be publicly reachable. This issue is fixed in Asterisk 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 22.8-cert3."}], "source": {"advisory": "GHSA-h5hv-jmgj-92q2", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-10-28T15:54:28.501669Z", "id": "CVE-2026-57186", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-28T16:13:12.086Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-57186", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-10-28T15:54:28.501669Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-28T15:54:29.698Z"}}], "cna": {"title": "Asterisk: CVE-2022-37325 fix is absent from current chan_ooh323 Q.931 party-number parser", "source": {"advisory": "GHSA-h5hv-jmgj-92q2", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}], "affected": [{"vendor": "asterisk", "product": "asterisk", "versions": [{"status": "affected", "version": ">= 21.0.0-pre1, < 21.12.3"}, {"status": "affected", "version": ">= 22.0.0-pre1, < 22.10.1"}, {"status": "affected", "version": ">= 23.0.0-pre1, < 23.4.1"}]}, {"vendor": "asterisk", "product": "certified-asterisk", "versions": [{"status": "affected", "version": ">= 22.8-cert1-pre1, < 22.8-cert3"}]}], "references": [{"url": "https://github.com/asterisk/asterisk/security/advisories/GHSA-h5hv-jmgj-92q2", "name": "https://github.com/asterisk/asterisk/security/advisories/GHSA-h5hv-jmgj-92q2", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/asterisk/asterisk/commit/07b9740cbc371ffa7936cf368089fd073250ea7c", "name": "https://github.com/asterisk/asterisk/commit/07b9740cbc371ffa7936cf368089fd073250ea7c", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/asterisk/asterisk/commit/0e776a837106d5d0d14503a53388337931045164", "name": "https://github.com/asterisk/asterisk/commit/0e776a837106d5d0d14503a53388337931045164", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/asterisk/asterisk/commit/42d3552d2ac0efbb68c9ec7ade898b6de0bfa033", "name": "https://github.com/asterisk/asterisk/commit/42d3552d2ac0efbb68c9ec7ade898b6de0bfa033", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/asterisk/asterisk/commit/46c6c652d1de9bfbb061fab0b1f681cf60660998", "name": "https://github.com/asterisk/asterisk/commit/46c6c652d1de9bfbb061fab0b1f681cf60660998", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/asterisk/asterisk/commit/62a7a7037b1a145cabf95895b119cbae4d3c5a4f", "name": "https://github.com/asterisk/asterisk/commit/62a7a7037b1a145cabf95895b119cbae4d3c5a4f", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/asterisk/asterisk/releases/tag/21.12.3", "name": "https://github.com/asterisk/asterisk/releases/tag/21.12.3", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/asterisk/asterisk/releases/tag/22.10.1", "name": "https://github.com/asterisk/asterisk/releases/tag/22.10.1", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/asterisk/asterisk/releases/tag/23.4.1", "name": "https://github.com/asterisk/asterisk/releases/tag/23.4.1", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/asterisk/asterisk/releases/tag/certified-22.8-cert3", "name": "https://github.com/asterisk/asterisk/releases/tag/certified-22.8-cert3", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/asterisk/asterisk/tree/24.0.0-pre1", "name": "https://github.com/asterisk/asterisk/tree/24.0.0-pre1", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "Asterisk is an open source private branch exchange and telephony toolkit. From 21.0.0-pre1 until Asterisk 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 22.8-cert3, the `chan_ooh323` `Q.931 party-number parser` lacks the `CVE-2022-37325` fix because that fix was never forward-ported from Asterisk 20 to later versions. Malformed Q.931 elements in an `OOH323 request` can therefore crash Asterisk. This issue affects Asterisk versions greater than 20. The `chan_ooh323` addon channel driver must be explicitly compiled and installed, which is not the default, and its port must be publicly reachable. This issue is fixed in Asterisk 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 22.8-cert3."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-839", "description": "CWE-839: Numeric Range Comparison Without Minimum Check"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-10-27T21:21:55.833Z"}}}, "cveMetadata": {"cveId": "CVE-2026-57186", "state": "PUBLISHED", "dateUpdated": "2026-10-28T16:13:12.086Z", "dateReserved": "2026-06-24T01:47:55.287Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-10-27T21:21:55.833Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "asterisk", "vendor": "asterisk", "versions": [{"status": "affected", "version": ">= 21.0.0-pre1, < 21.12.3"}, {"status": "affected", "version": ">= 22.0.0-pre1, < 22.10.1"}, {"status": "affected", "version": ">= 23.0.0-pre1, < 23.4.1"}]}, {"product": "certified-asterisk", "vendor": "asterisk", "versions": [{"status": "affected", "version": ">= 22.8-cert1-pre1, < 22.8-cert3"}]}], "source": "security-advisories@github.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Asterisk is an open source private branch exchange and telephony toolkit. From 21.0.0-pre1 until Asterisk 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 22.8-cert3, the `chan_ooh323` `Q.931 party-number parser` lacks the `CVE-2022-37325` fix because that fix was never forward-ported from Asterisk 20 to later versions. Malformed Q.931 elements in an `OOH323 request` can therefore crash Asterisk. This issue affects Asterisk versions greater than 20. The `chan_ooh323` addon channel driver must be explicitly compiled and installed, which is not the default, and its port must be publicly reachable. This issue is fixed in Asterisk 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 22.8-cert3."}], "id": "CVE-2026-57186", "lastModified": "2026-10-28T17:18:31.280", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-57186", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-10-28T15:54:28.501669Z", "version": "2.0.3"}}]}, "published": "2026-10-27T22:17:26.990", "references": [{"source": "security-advisories@github.com", "url": "https://github.com/asterisk/asterisk/commit/07b9740cbc371ffa7936cf368089fd073250ea7c"}, {"source": "security-advisories@github.com", "url": "https://github.com/asterisk/asterisk/commit/0e776a837106d5d0d14503a53388337931045164"}, {"source": "security-advisories@github.com", "url": "https://github.com/asterisk/asterisk/commit/42d3552d2ac0efbb68c9ec7ade898b6de0bfa033"}, {"source": "security-advisories@github.com", "url": "https://github.com/asterisk/asterisk/commit/46c6c652d1de9bfbb061fab0b1f681cf60660998"}, {"source": "security-advisories@github.com", "url": "https://github.com/asterisk/asterisk/commit/62a7a7037b1a145cabf95895b119cbae4d3c5a4f"}, {"source": "security-advisories@github.com", "url": "https://github.com/asterisk/asterisk/releases/tag/21.12.3"}, {"source": "security-advisories@github.com", "url": "https://github.com/asterisk/asterisk/releases/tag/22.10.1"}, {"source": "security-advisories@github.com", "url": "https://github.com/asterisk/asterisk/releases/tag/23.4.1"}, {"source": "security-advisories@github.com", "url": "https://github.com/asterisk/asterisk/releases/tag/certified-22.8-cert3"}, {"source": "security-advisories@github.com", "url": "https://github.com/asterisk/asterisk/security/advisories/GHSA-h5hv-jmgj-92q2"}, {"source": "security-advisories@github.com", "url": "https://github.com/asterisk/asterisk/tree/24.0.0-pre1"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-839"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{"bugzilla": {"description": "asterisk: asterisk: Denial of Service via malformed Q.931 elements in chan_ooh323", "id": "2562439", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2562439"}, "csaw": false, "cvss3": {"cvss3_base_score": "7.5", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-1286", "details": ["Asterisk is an open source private branch exchange and telephony toolkit. From 21.0.0-pre1 until Asterisk 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 22.8-cert3, the `chan_ooh323` `Q.931 party-number parser` lacks the `CVE-2022-37325` fix because that fix was never forward-ported from Asterisk 20 to later versions. Malformed Q.931 elements in an `OOH323 request` can therefore crash Asterisk. This issue affects Asterisk versions greater than 20. The `chan_ooh323` addon channel driver must be explicitly compiled and installed, which is not the default, and its port must be publicly reachable. This issue is fixed in Asterisk 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 22.8-cert3.", "A flaw was found in Asterisk. The Q.931 party-number parser within the chan_ooh323 channel driver fails to properly validate incoming data. A remote, unauthenticated attacker can exploit this flaw by sending malformed Q.931 elements in an OOH323 request, causing the application to crash and resulting in a denial of service (DoS)."], "name": "CVE-2026-57186", "public_date": "2026-10-27T21:21:55Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-57186\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-57186\nhttps://github.com/asterisk/asterisk/commit/07b9740cbc371ffa7936cf368089fd073250ea7c\nhttps://github.com/asterisk/asterisk/commit/0e776a837106d5d0d14503a53388337931045164\nhttps://github.com/asterisk/asterisk/commit/42d3552d2ac0efbb68c9ec7ade898b6de0bfa033\nhttps://github.com/asterisk/asterisk/commit/46c6c652d1de9bfbb061fab0b1f681cf60660998\nhttps://github.com/asterisk/asterisk/commit/62a7a7037b1a145cabf95895b119cbae4d3c5a4f\nhttps://github.com/asterisk/asterisk/releases/tag/21.12.3\nhttps://github.com/asterisk/asterisk/releases/tag/22.10.1\nhttps://github.com/asterisk/asterisk/releases/tag/23.4.1\nhttps://github.com/asterisk/asterisk/releases/tag/certified-22.8-cert3\nhttps://github.com/asterisk/asterisk/security/advisories/GHSA-h5hv-jmgj-92q2\nhttps://github.com/asterisk/asterisk/tree/24.0.0-pre1"], "statement": "Red Hat Product Security rates this vulnerability as Important because an unauthenticated remote attacker can crash the telephony service, causing a complete denial of service without requiring user interaction. Asterisk is not included or supported in Red Hat Enterprise Linux. In environments where Asterisk is deployed, the vulnerable chan_ooh323 channel driver is an optional add-on that is neither compiled nor loaded by default, and exploitation is only possible if the service port is reachable from untrusted networks.", "threat_severity": "Important"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[21.0.0-pre1,21.12.3)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[22.0.0-pre1,22.10.1)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[23.0.0-pre1,23.4.1)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "asterisk", "source": "cna", "vendor": "asterisk"}, "product": "asterisk", "vendor": "asterisk"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[22.8-cert1-pre1,22.8-cert3)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "certified-asterisk", "source": "cna", "vendor": "asterisk"}, "product": "certified_asterisk", "vendor": "asterisk"}], "created": "2026-10-27T22:45:09.472246+00:00", "updated": "2026-11-02T14:00:08.962617+00:00", "vendors": ["asterisk", "asterisk$PRODUCT$asterisk", "asterisk$PRODUCT$certified_asterisk"]}