CVE-2018-17281
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
15Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 52%
There is a stack consumption vulnerability in the res_http_websocket.so module of Asterisk through 13.23.0, 14.7.x through 14.7.7, and 15.x through 15.6.0 and Certified Asterisk through 13.21-cert2. It allows an attacker to crash Asterisk via a specially crafted HTTP request to upgrade the connection to a websocket.
Produtos afetados
n/a · n/aReferências
http://downloads.asterisk.org/pub/security/AST-2018-009.htmlhttp://packetstormsecurity.com/files/149453/Asterisk-Project-Security-Advisory-AST-2018-009.htmlhttp://seclists.org/fulldisclosure/2018/Sep/31https://issues.asterisk.org/jira/browse/ASTERISK-28013https://lists.debian.org/debian-lts-announce/2018/09/msg00034.htmlhttps://seclists.org/bugtraq/2018/Sep/53https://security.gentoo.org/glsa/201811-11https://www.debian.org/security/2018/dsa-4320http://www.securityfocus.com/bid/105389http://www.securitytracker.com/id/1041694