Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2018-12228

Опубликовано: 12 июн. 2018
Источник: nvd
CVSS3: 6.5
CVSS2: 6.8
EPSS Низкий

Описание

An issue was discovered in Asterisk Open Source 15.x before 15.4.1. When connected to Asterisk via TCP/TLS, if the client abruptly disconnects, or sends a specially crafted message, then Asterisk gets caught in an infinite loop while trying to read the data stream. This renders the system unusable.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:sangoma:asterisk:*:*:*:*:*:*:*:*
Версия от 15.0 (включая) до 15.4.1 (исключая)

EPSS

Процентиль: 62%
0.00422
Низкий

6.5 Medium

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-835

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 7 лет назад

An issue was discovered in Asterisk Open Source 15.x before 15.4.1. When connected to Asterisk via TCP/TLS, if the client abruptly disconnects, or sends a specially crafted message, then Asterisk gets caught in an infinite loop while trying to read the data stream. This renders the system unusable.

CVSS3: 6.5
debian
больше 7 лет назад

An issue was discovered in Asterisk Open Source 15.x before 15.4.1. Wh ...

CVSS3: 6.5
github
больше 3 лет назад

An issue was discovered in Asterisk Open Source 15.x before 15.4.1. When connected to Asterisk via TCP/TLS, if the client abruptly disconnects, or sends a specially crafted message, then Asterisk gets caught in an infinite loop while trying to read the data stream. This renders the system unusable.

EPSS

Процентиль: 62%
0.00422
Низкий

6.5 Medium

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-835