Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2015-1558

Опубликовано: 09 фев. 2015
Источник: nvd
CVSS2: 3.5
EPSS Средний

Описание

Asterisk Open Source 12.x before 12.8.1 and 13.x before 13.1.1, when using the PJSIP channel driver, does not properly reclaim RTP ports, which allows remote authenticated users to cause a denial of service (file descriptor consumption) via an SDP offer containing only incompatible codecs.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:digium:asterisk:12.0.0:*:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:12.1.0:-:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:12.1.0:rc1:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:12.1.0:rc2:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:12.1.0:rc3:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:12.1.1:*:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:12.2.0:*:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:12.2.0:rc1:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:12.2.0:rc2:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:12.2.0:rc3:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:12.3.0:*:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:12.3.0:rc1:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:12.3.0:rc2:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:12.3.1:*:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:12.3.2:*:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:12.4.0:*:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:12.4.0:rc1:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:12.5.0:*:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:12.5.0:rc1:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:12.6.0:*:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:12.6.0:rc1:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:12.7.0:*:*:*:lts:*:*:*
cpe:2.3:a:digium:asterisk:12.7.0:rc1:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:12.7.0:rc2:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:12.8.0:*:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:12.8.0:rc1:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:12.8.0:rc2:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:12.8.1:*:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:13.0.0:*:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:13.1.0:*:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:13.1.0:rc1:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:13.1.0:rc2:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:13.2.0:*:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:13.2.0:rc1:*:*:*:*:*:*

EPSS

Процентиль: 95%
0.17453
Средний

3.5 Low

CVSS2

Дефекты

CWE-399

Связанные уязвимости

ubuntu логотип

CVE-2015-1558

ubuntu
почти 11 лет назад

Asterisk Open Source 12.x before 12.8.1 and 13.x before 13.1.1, when using the PJSIP channel driver, does not properly reclaim RTP ports, which allows remote authenticated users to cause a denial of service (file descriptor consumption) via an SDP offer containing only incompatible codecs.

debian логотип

CVE-2015-1558

debian
почти 11 лет назад

Asterisk Open Source 12.x before 12.8.1 and 13.x before 13.1.1, when u ...

github логотип

GHSA-c6qp-2qc4-4h58

github
больше 3 лет назад

Asterisk Open Source 12.x before 12.8.1 and 13.x before 13.1.1, when using the PJSIP channel driver, does not properly reclaim RTP ports, which allows remote authenticated users to cause a denial of service (file descriptor consumption) via an SDP offer containing only incompatible codecs.

EPSS

Процентиль: 95%
0.17453
Средний

3.5 Low

CVSS2

Дефекты

CWE-399