Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

digium asterisk 15.1.0 vulnerabilities and exploits

(subscribe to this query)
5.9
CVSSv3
CVE-2018-7287
An issue exists in res_http_websocket.c in Asterisk 15.x up to and including 15.2.1. If the HTTP server is enabled (default is disabled), WebSocket payloads of size 0 are mishandled (with a busy loop).
Digium Asterisk 15.0.0Digium Asterisk 15.1.0Digium Asterisk 15.2.0Digium Asterisk 15.2.1Digium Asterisk 15.1.2Digium Asterisk 15.1.4Digium Asterisk 15.1.1Digium Asterisk 15.1.3Digium Asterisk 15.1.5
7.5
CVSSv3
CVE-2018-19278
Buffer overflow in DNS SRV and NAPTR lookups in Digium Asterisk 15.x prior to 15.6.2 and 16.x prior to 16.0.1 allows remote malicious users to crash Asterisk via a specially crafted DNS SRV or NAPTR response, because a buffer size is supposed to match an expanded length but actua...
Digium Asterisk 15.6.0Digium Asterisk 15.5.0Digium Asterisk 15.4.0Digium Asterisk 15.2.1Digium Asterisk 15.1.4Digium Asterisk 15.1.2Digium Asterisk 15.3.0Digium Asterisk 15.1.0Digium Asterisk 15.0.0Digium Asterisk 16.0.1Digium Asterisk 16.0.0Digium Asterisk 15.2.2Digium Asterisk 15.2.0Digium Asterisk 15.1.5Digium Asterisk 15.6.1Digium Asterisk 15.4.1Digium Asterisk 15.1.3
6.5
CVSSv3
CVE-2018-7286
An issue exists in Asterisk up to and including 13.19.1, 14.x up to and including 14.7.5, and 15.x up to and including 15.2.1, and Certified Asterisk up to and including 13.18-cert2. res_pjsip allows remote authenticated users to crash Asterisk (segmentation fault) by sending a n...
Digium AsteriskDigium Asterisk 13.19.1Digium Certified AsteriskDebian Debian Linux 9.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
authentication bypassCVE-2024-30051remoteCVE-2024-27954CVE-2023-51483CVE-2023-47782SSRFCVE-2024-24715CVE-2023-52424
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook