CVE-2024-42491

asterisk: Asterisk is an open-source private branch exchange (PBX)

CVE-2024-42491 is fixed in 69 products on 1 platform, first by DEBIAN-CVE-2024-42491, released September 5, 2024. It is not reported as exploited. Patch Radar priority: Routine.

Routine
CVSS
5.7
medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0058
48th percentile

Asterisk is an open-source private branch exchange (PBX). Prior to versions 18.24.3, 20.9.3, and 21.4.3 of Asterisk and versions 18.9-cert12 and 20.7-cert2 of certified-asterisk, if Asterisk attempts to send a SIP request to a URI whose host portion starts with `.1` or `[.1]`, and res_resolver_unbound is loaded, Asterisk will crash with a SEGV. To receive a patch, users should upgrade to one of the following versions: 18.24.3, 20.9.3, 21.4.3, certified-18.9-cert12, certified-20.7-cert2. Two workarounds are available. Disable res_resolver_unbound by setting `noload = res_resolver_unbound.so` in modules.conf, or set `rewrite_contact = yes` on all PJSIP endpoints. NOTE: This may not be appropriate for all Asterisk configurations.

Where it's fixed

ProductFixed inFixReleased
Linux
asterisk · Debian 14 1:20.9.3~dfsg+~cs6.14.60671435-1 DEBIAN-CVE-2024-42491 Sep 5, 2024
asterisk · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026
asterisk-ael · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026
asterisk-ael-debuginfo · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026
asterisk-alembic · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026
asterisk-alsa · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026
asterisk-alsa-debuginfo · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026
asterisk-calendar · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026
asterisk-calendar-debuginfo · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026
asterisk-corosync · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026
asterisk-corosync-debuginfo · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026
asterisk-curl · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026
asterisk-curl-debuginfo · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026
asterisk-dahdi · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026
asterisk-dahdi-debuginfo · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026
asterisk-debuginfo · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026
asterisk-debugsource · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026
asterisk-devel · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026
asterisk-fax · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026
asterisk-fax-debuginfo · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026
asterisk-festival · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026
asterisk-festival-debuginfo · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026
asterisk-hep · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026
asterisk-hep-debuginfo · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026
asterisk-iax2 · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026
asterisk-iax2-debuginfo · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026
asterisk-ldap · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026
asterisk-ldap-debuginfo · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026
asterisk-lua · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026
asterisk-lua-debuginfo · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026
asterisk-mgcp · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026
asterisk-mgcp-debuginfo · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026
asterisk-minivm · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026
asterisk-minivm-debuginfo · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026
asterisk-mobile · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026
asterisk-mobile-debuginfo · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026
asterisk-mwi-external · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026
asterisk-mwi-external-debuginfo · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026
asterisk-mysql · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026
asterisk-mysql-debuginfo · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026
asterisk-odbc · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026
asterisk-odbc-debuginfo · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026
asterisk-oss · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026
asterisk-oss-debuginfo · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026
asterisk-pjsip · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026
asterisk-pjsip-debuginfo · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026
asterisk-portaudio · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026
asterisk-portaudio-debuginfo · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026
asterisk-postgresql · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026
asterisk-postgresql-debuginfo · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026
asterisk-radius · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026
asterisk-radius-debuginfo · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026
asterisk-sip · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026
asterisk-sip-debuginfo · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026
asterisk-skinny · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026
asterisk-skinny-debuginfo · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026
asterisk-snmp · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026
asterisk-snmp-debuginfo · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026
asterisk-sqlite · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026
asterisk-sqlite-debuginfo · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026
asterisk-tds · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026
asterisk-tds-debuginfo · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026
asterisk-unistim · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026
asterisk-unistim-debuginfo · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026
asterisk-voicemail · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026
asterisk-voicemail-debuginfo · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026
asterisk-voicemail-odbc · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026
asterisk-voicemail-odbc-debuginfo · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026
asterisk-voicemail-plain · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026
asterisk-voicemail-plain-debuginfo · Fedora 43 18.26.4-1.fc43 FEDORA-2026-80B21DEBE7 Apr 11, 2026

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.