medium6.5
CVE-2018-12228
An issue was discovered in Asterisk Open Source 15.x before 15.4.1.
Impact
An issue was discovered in Asterisk Open Source 15.x before 15.4.1. When connected to Asterisk via TCP/TLS, if the client abruptly disconnects, or sends a specially crafted message, then Asterisk gets caught in an infinite loop while trying to read the data stream. This renders the system unusable.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sangoma | Asterisk | from 15.0 before 15.4.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://downloads.asterisk.org/pub/security/AST-2018-007.html
- http://www.securityfocus.com/bid/104457
- https://issues.asterisk.org/jira/browse/ASTERISK-27807
- http://downloads.asterisk.org/pub/security/AST-2018-007.html
- http://www.securityfocus.com/bid/104457
- https://issues.asterisk.org/jira/browse/ASTERISK-27807