medium5.9
CVE-2018-7287
An issue was discovered in res_http_websocket.c in Asterisk 15.x through 15.2.1.
Impact
An issue was discovered in res_http_websocket.c in Asterisk 15.x through 15.2.1. If the HTTP server is enabled (default is disabled), WebSocket payloads of size 0 are mishandled (with a busy loop).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Digium | Asterisk | Versions 15.0.0, 15.1.0, 15.1.1, 15.1.2, 15.1.3, 15.1.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://downloads.digium.com/pub/security/AST-2018-006.html
- http://www.securityfocus.com/bid/103120
- http://www.securitytracker.com/id/1040419
- https://issues.asterisk.org/jira/browse/ASTERISK-27658
- http://downloads.digium.com/pub/security/AST-2018-006.html
- http://www.securityfocus.com/bid/103120
- http://www.securitytracker.com/id/1040419
- https://issues.asterisk.org/jira/browse/ASTERISK-27658