[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ff70efWEg2qoSGtMmvbLUnYyd6TSezQisivQS_HORXgk":3,"g5a-risk:CVE-2024-42491":206},{"success":4,"data":5,"meta":203},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":34,"epssPercentile":28,"epssTimeSeries":35,"severity":36,"affectedProducts":37,"affectedProductsCount":52,"references":53,"referencesCount":79,"weaknesses":80,"weaknessesCount":95,"isActivelyExploited":96,"cisaInfo":28,"otxData":28,"relatedBlogPosts":97,"seoMetadata":98,"configurations":123,"relatedVendorCves":201,"notableEvents":202},"CVE-2024-42491","What is CVE-2024-42491?","Asterisk is an open-source private branch exchange (PBX). Prior to versions 18.24.3, 20.9.3, and 21.4.3 of Asterisk and versions 18.9-cert12 and 20.7-cert2 of certified-asterisk, if Asterisk attempts to send a SIP request to a URI whose host portion starts with `.1` or `[.1]`, and res_resolver_unbound is loaded, Asterisk will crash with a SEGV. To receive a patch, users should upgrade to one of the following versions: 18.24.3, 20.9.3, 21.4.3, certified-18.9-cert12, certified-20.7-cert2. Two workarounds are available. Disable res_resolver_unbound by setting `noload = res_resolver_unbound.so` in modules.conf, or set `rewrite_contact = yes` on all PJSIP endpoints. NOTE: This may not be appropriate for all Asterisk configurations.","Asterisk is an open-source private branch exchange (PBX). Prior to versions 18.24.3, 20.9.3, and 21.4.3 of Asterisk and versions 18.9-cert12 and 20.7-cert2 o...","2024-09-05T18:15:05.707","2026-06-17T07:49:33.203",5.7,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":31,"CVSSMetricV2":32,"CVSSMetricV40":33},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":29,"ImpactScore":30},"security-advisories@github.com","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},"3.1","NETWORK","LOW","REQUIRED","UNCHANGED","NONE","HIGH","MEDIUM",null,2.1,3.6,[],[],[],0.00581,[34,34,34,34,34,34,34],"Medium",[38,43,46,49],{"vendor":39,"product":40,"version":41,"criteria":42,"vulnerable":4},"sangoma","asterisk","*","cpe:2.3:a:sangoma:asterisk:*:*:*:*:*:*:*:*",{"vendor":39,"product":44,"version":41,"criteria":45,"vulnerable":4},"certified_asterisk","cpe:2.3:a:sangoma:certified_asterisk:*:*:*:*:*:*:*:*",{"vendor":39,"product":44,"version":47,"criteria":48,"vulnerable":4},"18.9","cpe:2.3:a:sangoma:certified_asterisk:18.9:-:*:*:*:*:*:*",{"vendor":39,"product":44,"version":50,"criteria":51,"vulnerable":4},"20.7","cpe:2.3:a:sangoma:certified_asterisk:20.7:cert1:*:*:*:*:*:*",4,[54,59,62,65,68,71,75],{"url":55,"source":56,"tags":57},"https:\u002F\u002Fgithub.com\u002Fasterisk\u002Fasterisk\u002Fcommit\u002F42a2f4ccfa2c7062a15063e765916b3332e34cc4","GitHub",[58],"Patch",{"url":60,"source":56,"tags":61},"https:\u002F\u002Fgithub.com\u002Fasterisk\u002Fasterisk\u002Fcommit\u002F4f01669c7c41c9184f3cce9a3cf1b2ebf6201742",[58],{"url":63,"source":56,"tags":64},"https:\u002F\u002Fgithub.com\u002Fasterisk\u002Fasterisk\u002Fcommit\u002F50bf8d4d3064930d28ecf1ce3397b14574d514d2",[58],{"url":66,"source":56,"tags":67},"https:\u002F\u002Fgithub.com\u002Fasterisk\u002Fasterisk\u002Fcommit\u002F7a0090325bfa9d778a39ae5f7d0a98109e4651c8",[58],{"url":69,"source":56,"tags":70},"https:\u002F\u002Fgithub.com\u002Fasterisk\u002Fasterisk\u002Fcommit\u002Fa15050650abf09c10a3c135fab148220cd41d3a0",[58],{"url":72,"source":56,"tags":73},"https:\u002F\u002Fgithub.com\u002Fasterisk\u002Fasterisk\u002Fsecurity\u002Fadvisories\u002FGHSA-v428-g3cw-7hv9",[74],"Vendor Advisory",{"url":76,"source":77,"tags":78},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F10\u002Fmsg00016.html","Debian",[],7,[81,89],{"id":82,"name":83,"description":84,"extendedDescription":85,"status":86,"abstraction":87,"structure":88},"CWE-252","Unchecked Return Value","The product does not check the return value from a method or function, which can prevent it from detecting unexpected states and conditions.","Two common programmer assumptions are \"this function call can never fail\" and \"it doesn't matter if this function call fails\". If an attacker can force the function to fail or otherwise return a value that is not expected, then the subsequent program logic could lead to a vulnerability, because the product is not in a state that the programmer assumes. For example, if the program calls a function to drop privileges but does not check the return code to ensure that privileges were successfully dropped, then the program will continue to operate with the higher privileges.","Draft","Base","Simple",{"id":90,"name":91,"description":92,"extendedDescription":93,"status":94,"abstraction":87,"structure":88},"CWE-476","NULL Pointer Dereference","The product dereferences a pointer that it expects to be valid but is NULL.","","Stable",2,false,[],{"title":99,"metaDescription":100,"keywords":101,"canonicalUrl":102,"structuredData":103},"What is CVE-2024-42491? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2024-42491, a medium severity cyber security vulnerability from 2024. Asterisk is an open-source private branch exchange (PBX)....","CVE-2024-42491, CVE-2024-42491 vulnerability, CVE-2024-42491 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, sangoma security, asterisk vulnerability, certified_asterisk vulnerability","\u002Fwhat-is\u002Fcve-2024-42491",{"@context":104,"@type":105,"headline":99,"description":100,"datePublished":10,"dateModified":11,"author":106,"publisher":110,"about":114,"mainEntityOfPage":118,"articleSection":121,"keywords":122},"https:\u002F\u002Fschema.org","TechArticle",{"@type":107,"name":108,"url":109},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":107,"name":108,"url":109,"logo":111},{"@type":112,"url":113},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":115,"name":6,"description":116,"additionalType":117},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":119,"@id":120},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2024-42491","Cybersecurity","CVE-2024-42491, CVE-2024-42491 vulnerability, CVE-2024-42491 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[124,140],{"Operator":28,"Negate":28,"Nodes":125},[126],{"Operator":127,"Negate":96,"CPEMatch":128},"OR",[129,132,136],{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":130,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":131,"VersionEndIncluding":28},"5755DE4B-FD1C-4B6B-86B8-FC1FD90717B4","18.24.3",{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":133,"VersionStartExcluding":28,"VersionStartIncluding":134,"VersionEndExcluding":135,"VersionEndIncluding":28},"089E3015-4E8B-4ADE-9C14-9F2CE78986F1","20.0.0","20.9.3",{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":137,"VersionStartExcluding":28,"VersionStartIncluding":138,"VersionEndExcluding":28,"VersionEndIncluding":139},"FC916081-F612-4234-A7BB-BB1614154A28","21.0.0","21.4.3",{"Operator":28,"Negate":28,"Nodes":141},[142],{"Operator":127,"Negate":96,"CPEMatch":143},[144,146,148,151,154,157,160,163,166,169,172,175,178,181,184,187,190,192,195,198],{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":145,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":47,"VersionEndIncluding":28},"B71A493F-F47B-4F19-AD21-3800DE63DF5A",{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":147,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"2A7FA28D-33B7-4F20-8235-E66C21019875",{"Vulnerable":4,"Criteria":149,"MatchCriteriaID":150,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:sangoma:certified_asterisk:18.9:cert1:*:*:*:*:*:*","79EEB5E5-B79E-454B-8DCD-3272BA337A9E",{"Vulnerable":4,"Criteria":152,"MatchCriteriaID":153,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:sangoma:certified_asterisk:18.9:cert1-rc1:*:*:*:*:*:*","AD3BBA39-95EC-462F-8F5A-15E8D07CC804",{"Vulnerable":4,"Criteria":155,"MatchCriteriaID":156,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:sangoma:certified_asterisk:18.9:cert10:*:*:*:*:*:*","D6BF553C-020D-4F99-9995-CA4A4383B2DD",{"Vulnerable":4,"Criteria":158,"MatchCriteriaID":159,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:sangoma:certified_asterisk:18.9:cert11:*:*:*:*:*:*","E3069F1F-DDE8-4E9A-B4FF-64B7B11EEFCB",{"Vulnerable":4,"Criteria":161,"MatchCriteriaID":162,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:sangoma:certified_asterisk:18.9:cert2:*:*:*:*:*:*","892BAE5D-A64E-4FE0-9A99-8C07F342A042",{"Vulnerable":4,"Criteria":164,"MatchCriteriaID":165,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:sangoma:certified_asterisk:18.9:cert3:*:*:*:*:*:*","1A716A45-7075-4CA6-9EF5-2DD088248A5C",{"Vulnerable":4,"Criteria":167,"MatchCriteriaID":168,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:sangoma:certified_asterisk:18.9:cert4:*:*:*:*:*:*","80EFA05B-E22D-49CE-BDD6-5C7123F1C12B",{"Vulnerable":4,"Criteria":170,"MatchCriteriaID":171,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:sangoma:certified_asterisk:18.9:cert5:*:*:*:*:*:*","20FD475F-2B46-47C9-B535-1561E29CB7A1",{"Vulnerable":4,"Criteria":173,"MatchCriteriaID":174,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:sangoma:certified_asterisk:18.9:cert6:*:*:*:*:*:*","7238FCD9-9F40-44BA-A170-69D4857AA1CE",{"Vulnerable":4,"Criteria":176,"MatchCriteriaID":177,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:sangoma:certified_asterisk:18.9:cert7:*:*:*:*:*:*","F657B046-6C83-48F9-A0B1-C63CDA7FD61D",{"Vulnerable":4,"Criteria":179,"MatchCriteriaID":180,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:sangoma:certified_asterisk:18.9:cert8:*:*:*:*:*:*","6D87C7DE-23EA-4532-A2E4-9BF82ADE12DC",{"Vulnerable":4,"Criteria":182,"MatchCriteriaID":183,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:sangoma:certified_asterisk:18.9:cert8-rc1:*:*:*:*:*:*","B79A5B46-5CA3-445E-BE47-1711DCD038A1",{"Vulnerable":4,"Criteria":185,"MatchCriteriaID":186,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:sangoma:certified_asterisk:18.9:cert8-rc2:*:*:*:*:*:*","D600B37E-94EA-48DE-B48E-871B3A983721",{"Vulnerable":4,"Criteria":188,"MatchCriteriaID":189,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:sangoma:certified_asterisk:18.9:cert9:*:*:*:*:*:*","2FC3A00E-D1C6-467F-8FE7-E8437A527B3C",{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":191,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"79225576-AF7C-4099-9624-C53578A7417F",{"Vulnerable":4,"Criteria":193,"MatchCriteriaID":194,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:sangoma:certified_asterisk:20.7:cert1-rc1:*:*:*:*:*:*","29323E6E-12C9-46C7-B29C-25E0CD537A8E",{"Vulnerable":4,"Criteria":196,"MatchCriteriaID":197,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:sangoma:certified_asterisk:20.7:cert1-rc2:*:*:*:*:*:*","8E563972-78C0-40A0-83EA-6A3BA3D71946",{"Vulnerable":4,"Criteria":199,"MatchCriteriaID":200,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:sangoma:certified_asterisk:20.7:cert2:*:*:*:*:*:*","64209621-D458-432A-B0E3-C8D0B6698574",[],[],{"lastModified":11,"cacheTime":204,"version":205},1792447749149,"2.0",{"score":207,"band":208,"action":209,"scoredAt":210},22,"Low","Monitor","2026-10-16T07:03:46.036385+00:00"]