CVE Vulnerabilities

CVE-2018-7286

Published: Feb 22, 2018 | Modified: Oct 03, 2019
CVSS 3.x
6.5
MEDIUM
Source:
NVD
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
4 MEDIUM
AV:N/AC:L/Au:S/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu

An issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5, and 15.x through 15.2.1, and Certified Asterisk through 13.18-cert2. res_pjsip allows remote authenticated users to crash Asterisk (segmentation fault) by sending a number of SIP INVITE messages on a TCP or TLS connection and then suddenly closing the connection.

Affected Software

Name Vendor Start Version End Version
Asterisk Digium 14.0.0 (including) 14.7.5 (including)
Asterisk Digium 15.0.0 (including) 15.2.1 (including)
Asterisk Digium 13.19.1 (including) 13.19.1 (including)
Certified_asterisk Digium * 13.18 (including)

References