Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2018-7286

Опубликовано: 22 фев. 2018
Источник: nvd
CVSS3: 6.5
CVSS2: 4
EPSS Средний

Описание

An issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5, and 15.x through 15.2.1, and Certified Asterisk through 13.18-cert2. res_pjsip allows remote authenticated users to crash Asterisk (segmentation fault) by sending a number of SIP INVITE messages on a TCP or TLS connection and then suddenly closing the connection.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*
Версия от 14.0.0 (включая) до 14.7.5 (включая)
cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*
Версия от 15.0.0 (включая) до 15.2.1 (включая)
cpe:2.3:a:digium:asterisk:13.19.1:*:*:*:*:*:*:*
cpe:2.3:a:digium:certified_asterisk:*:*:*:*:*:*:*:*
Версия до 13.18 (включая)
Конфигурация 2
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 98%
0.54632
Средний

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVSS3: 6.5
ubuntu
почти 8 лет назад

An issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5, and 15.x through 15.2.1, and Certified Asterisk through 13.18-cert2. res_pjsip allows remote authenticated users to crash Asterisk (segmentation fault) by sending a number of SIP INVITE messages on a TCP or TLS connection and then suddenly closing the connection.

CVSS3: 6.5
debian
почти 8 лет назад

An issue was discovered in Asterisk through 13.19.1, 14.x through 14.7 ...

CVSS3: 6.5
github
больше 3 лет назад

An issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5, and 15.x through 15.2.1, and Certified Asterisk through 13.18-cert2. res_pjsip allows remote authenticated users to crash Asterisk (segmentation fault) by sending a number of SIP INVITE messages on a TCP or TLS connection and then suddenly closing the connection.

EPSS

Процентиль: 98%
0.54632
Средний

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

NVD-CWE-noinfo