asterisk: Asterisk is an open-source private branch exchange (PBX)
CVE-2024-42491 is fixed in 69 products on 1 platform, first by DEBIAN-CVE-2024-42491, released September 5, 2024. It is not reported as exploited. Patch Radar priority: Routine.
Asterisk is an open-source private branch exchange (PBX). Prior to versions 18.24.3, 20.9.3, and 21.4.3 of Asterisk and versions 18.9-cert12 and 20.7-cert2 of certified-asterisk, if Asterisk attempts to send a SIP request to a URI whose host portion starts with `.1` or `[.1]`, and res_resolver_unbound is loaded, Asterisk will crash with a SEGV. To receive a patch, users should upgrade to one of the following versions: 18.24.3, 20.9.3, 21.4.3, certified-18.9-cert12, certified-20.7-cert2. Two workarounds are available. Disable res_resolver_unbound by setting `noload = res_resolver_unbound.so` in modules.conf, or set `rewrite_contact = yes` on all PJSIP endpoints. NOTE: This may not be appropriate for all Asterisk configurations.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| asterisk · Debian 14 | 1:20.9.3~dfsg+~cs6.14.60671435-1 | DEBIAN-CVE-2024-42491 | Sep 5, 2024 |
| asterisk · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
| asterisk-ael · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
| asterisk-ael-debuginfo · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
| asterisk-alembic · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
| asterisk-alsa · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
| asterisk-alsa-debuginfo · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
| asterisk-calendar · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
| asterisk-calendar-debuginfo · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
| asterisk-corosync · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
| asterisk-corosync-debuginfo · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
| asterisk-curl · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
| asterisk-curl-debuginfo · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
| asterisk-dahdi · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
| asterisk-dahdi-debuginfo · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
| asterisk-debuginfo · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
| asterisk-debugsource · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
| asterisk-devel · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
| asterisk-fax · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
| asterisk-fax-debuginfo · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
| asterisk-festival · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
| asterisk-festival-debuginfo · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
| asterisk-hep · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
| asterisk-hep-debuginfo · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
| asterisk-iax2 · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
| asterisk-iax2-debuginfo · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
| asterisk-ldap · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
| asterisk-ldap-debuginfo · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
| asterisk-lua · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
| asterisk-lua-debuginfo · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
| asterisk-mgcp · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
| asterisk-mgcp-debuginfo · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
| asterisk-minivm · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
| asterisk-minivm-debuginfo · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
| asterisk-mobile · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
| asterisk-mobile-debuginfo · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
| asterisk-mwi-external · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
| asterisk-mwi-external-debuginfo · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
| asterisk-mysql · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
| asterisk-mysql-debuginfo · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
| asterisk-odbc · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
| asterisk-odbc-debuginfo · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
| asterisk-oss · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
| asterisk-oss-debuginfo · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
| asterisk-pjsip · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
| asterisk-pjsip-debuginfo · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
| asterisk-portaudio · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
| asterisk-portaudio-debuginfo · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
| asterisk-postgresql · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
| asterisk-postgresql-debuginfo · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
| asterisk-radius · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
| asterisk-radius-debuginfo · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
| asterisk-sip · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
| asterisk-sip-debuginfo · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
| asterisk-skinny · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
| asterisk-skinny-debuginfo · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
| asterisk-snmp · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
| asterisk-snmp-debuginfo · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
| asterisk-sqlite · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
| asterisk-sqlite-debuginfo · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
| asterisk-tds · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
| asterisk-tds-debuginfo · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
| asterisk-unistim · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
| asterisk-unistim-debuginfo · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
| asterisk-voicemail · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
| asterisk-voicemail-debuginfo · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
| asterisk-voicemail-odbc · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
| asterisk-voicemail-odbc-debuginfo · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
| asterisk-voicemail-plain · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
| asterisk-voicemail-plain-debuginfo · Fedora 43 | 18.26.4-1.fc43 | FEDORA-2026-80B21DEBE7 | Apr 11, 2026 |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.