digium asterisk 15.2.0 vulnerabilities and exploits

(subscribe to this query)

5.9

CVSSv3

An issue exists in res_http_websocket.c in Asterisk 15.x up to and including 15.2.1. If the HTTP server is enabled (default is disabled), WebSocket payloads of size 0 are mishandled (with a busy loop).

Digium Asterisk 15.0.0 Digium Asterisk 15.1.0 Digium Asterisk 15.2.0 Digium Asterisk 15.2.1 Digium Asterisk 15.1.2 Digium Asterisk 15.1.4 Digium Asterisk 15.1.1 Digium Asterisk 15.1.3 Digium Asterisk 15.1.5

6.5

CVSSv3

An issue exists in Asterisk up to and including 13.19.1, 14.x up to and including 14.7.5, and 15.x up to and including 15.2.1, and Certified Asterisk up to and including 13.18-cert2. res_pjsip allows remote authenticated users to crash Asterisk (segmentation fault) by sending a n...

Digium Asterisk Digium Asterisk 13.19.1 Digium Certified Asterisk Debian Debian Linux 9.0

1 EDB exploit

7.5

CVSSv3

A Buffer Overflow issue exists in Asterisk up to and including 13.19.1, 14.x up to and including 14.7.5, and 15.x up to and including 15.2.1, and Certified Asterisk up to and including 13.18-cert2. When processing a SUBSCRIBE request, the res_pjsip_pubsub module stores the accept...

Digium Asterisk Digium Certified Asterisk 13.18 Digium Certified Asterisk Debian Debian Linux 9.0

1 EDB exploit1 Github repository

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook