CVE-2018-7287

Опубликовано: 22 фев. 2018

Источник: debian

Описание

An issue was discovered in res_http_websocket.c in Asterisk 15.x through 15.2.1. If the HTTP server is enabled (default is disabled), WebSocket payloads of size 0 are mishandled (with a busy loop).

Пакеты

Пакет	Статус	Версия исправления	Релиз	Тип
asterisk	not-affected			package

Примечания

downloads.digium.com/pub/security/AST-2018-006.html
https://issues.asterisk.org/jira/browse/ASTERISK-27658

Связанные уязвимости

CVE-2018-7287

CVSS3: 5.9

ubuntu

почти 8 лет назад

An issue was discovered in res_http_websocket.c in Asterisk 15.x through 15.2.1. If the HTTP server is enabled (default is disabled), WebSocket payloads of size 0 are mishandled (with a busy loop).

CVE-2018-7287

CVSS3: 5.9

nvd

почти 8 лет назад

An issue was discovered in res_http_websocket.c in Asterisk 15.x through 15.2.1. If the HTTP server is enabled (default is disabled), WebSocket payloads of size 0 are mishandled (with a busy loop).

GHSA-38rg-6v6g-2qmq

CVSS3: 5.9

github

больше 3 лет назад

An issue was discovered in res_http_websocket.c in Asterisk 15.x through 15.2.1. If the HTTP server is enabled (default is disabled), WebSocket payloads of size 0 are mishandled (with a busy loop).