Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

digium asterisk 15.1.2 vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2018-7287
An issue exists in res_http_websocket.c in Asterisk 15.x up to and including 15.2.1. If the HTTP server is enabled (default is disabled), WebSocket payloads of size 0 are mishandled (with a busy loop).
Digium Asterisk 15.0.0Digium Asterisk 15.1.0Digium Asterisk 15.2.0Digium Asterisk 15.2.1Digium Asterisk 15.1.2Digium Asterisk 15.1.4Digium Asterisk 15.1.1Digium Asterisk 15.1.3Digium Asterisk 15.1.5
5
CVSSv2
CVE-2018-19278
Buffer overflow in DNS SRV and NAPTR lookups in Digium Asterisk 15.x prior to 15.6.2 and 16.x prior to 16.0.1 allows remote malicious users to crash Asterisk via a specially crafted DNS SRV or NAPTR response, because a buffer size is supposed to match an expanded length but actua...
Digium Asterisk 15.6.0Digium Asterisk 15.5.0Digium Asterisk 15.4.0Digium Asterisk 15.2.1Digium Asterisk 15.1.4Digium Asterisk 15.1.2Digium Asterisk 15.3.0Digium Asterisk 15.1.0Digium Asterisk 15.0.0Digium Asterisk 16.0.1Digium Asterisk 16.0.0Digium Asterisk 15.2.2Digium Asterisk 15.2.0Digium Asterisk 15.1.5Digium Asterisk 15.6.1Digium Asterisk 15.4.1Digium Asterisk 15.1.3
5
CVSSv2
CVE-2017-17090
An issue exists in chan_skinny.c in Asterisk Open Source 13.18.2 and older, 14.7.2 and older, and 15.1.2 and older, and Certified Asterisk 13.13-cert7 and older. If the chan_skinny (aka SCCP protocol) channel driver is flooded with certain requests, it can cause the asterisk proc...
Digium Certified Asterisk 13.13Digium Certified AsteriskDigium Asterisk
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2020-4463CVE-2024-29895injectCVE-2023-52689CVE-2024-5049CVE-2024-5051privilege escalationphysicalCVE-2023-52676
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook