Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2018-19278

Опубликовано: 14 нояб. 2018
Источник: nvd
CVSS3: 7.5
CVSS2: 5
EPSS Низкий

Описание

Buffer overflow in DNS SRV and NAPTR lookups in Digium Asterisk 15.x before 15.6.2 and 16.x before 16.0.1 allows remote attackers to crash Asterisk via a specially crafted DNS SRV or NAPTR response, because a buffer size is supposed to match an expanded length but actually matches a compressed length.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:digium:asterisk:15.0.0:*:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:15.0.0:b1:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:15.0.0:rc1:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:15.1.0:*:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:15.1.0:rc1:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:15.1.0:rc2:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:15.1.2:*:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:15.1.3:*:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:15.1.4:*:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:15.1.5:*:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:15.2.0:rc1:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:15.2.0:rc2:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:15.2.1:*:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:15.2.2:*:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:15.3.0:*:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:15.3.0:rc1:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:15.3.0:rc2:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:15.4.0:*:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:15.4.0:rc1:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:15.4.0:rc2:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:15.4.1:*:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:15.5.0:*:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:15.5.0:rc1:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:15.6.0:*:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:15.6.0:rc1:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:15.6.1:*:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:16.0.0:*:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:16.0.0:rc2:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:16.0.0:rc3:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:16.0.1:rc1:*:*:*:*:*:*

EPSS

Процентиль: 89%
0.03579
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

debian логотип

CVE-2018-19278

CVSS3: 7.5
debian
почти 8 лет назад

Buffer overflow in DNS SRV and NAPTR lookups in Digium Asterisk 15.x b ...

github логотип

GHSA-47fm-v3pv-gm8p

CVSS3: 7.5
github
больше 4 лет назад

Buffer overflow in DNS SRV and NAPTR lookups in Digium Asterisk 15.x before 15.6.2 and 16.x before 16.0.1 allows remote attackers to crash Asterisk via a specially crafted DNS SRV or NAPTR response, because a buffer size is supposed to match an expanded length but actually matches a compressed length.

altlinux логотип

ALT-PU-2019-2182

CVSS3: 7.5
altlinux
больше 7 лет назад

ALT-PU-2019-2182: package `asterisk` update to version 16.4.0-alt1

EPSS

Процентиль: 89%
0.03579
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-119