CVE-2018-7284
high · 7.5A Buffer Overflow issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5, and 15.x through 15.2.1, and Certified Asterisk through 13.18-cert2. When processing a SUBSCRIBE request, the res_pjsip_pubsub module stores the accepted formats present in the Accept headers of the request. This code did not limit the number of headers it processed, despite having a fixed limit of 32. If more than 32 Accept headers were present, the code would write outside of its memory and cause a crash.
7.5
CVSS
57.7%
EPSS (exploit prob.)
99th
EPSS percentile
2018-02-22
Published
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-119
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| digium | asterisk | <= 13.19.1 |
| digium | asterisk | >= 14.0.0, <= 14.7.5 |
| digium | asterisk | >= 15.0.0, <= 15.2.1 |
| digium | certified_asterisk | 13.18 |
| digium | certified_asterisk | 13.18 |
| digium | certified_asterisk | <= 13.18 |
| debian | debian_linux | 9.0 |
Check a specific version with /api/v1/cve/match.
References
- http://downloads.asterisk.org/pub/security/AST-2018-004.html
- http://www.securityfocus.com/bid/103151
- http://www.securitytracker.com/id/1040416
- https://www.debian.org/security/2018/dsa-4320
- https://www.exploit-db.com/exploits/44184/
- http://downloads.asterisk.org/pub/security/AST-2018-004.html
- http://www.securityfocus.com/bid/103151
- http://www.securitytracker.com/id/1040416
- https://www.debian.org/security/2018/dsa-4320
- https://www.exploit-db.com/exploits/44184/
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2018-7284