PT-2018-13970 · Sangoma · Asterisk

Sean Bright · Published 2018-09-24 · Updated 2019-10-03 · CVE-2018-17281

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Asterisk versions 13.23.0 and earlier, 14.7.x through 14.7.7, 15.x through 15.6.0 Certified Asterisk versions 13.21-cert2 and earlier

Description The issue is related to a stack consumption vulnerability in the res http websocket.so module. It can be exploited by an attacker via a specially crafted HTTP request to upgrade the connection to a websocket, potentially crashing Asterisk.

Recommendations For Asterisk versions 13.23.0 and earlier, update to a version later than 13.23.0 to resolve the issue. For Asterisk versions 14.7.x through 14.7.7, update to a version later than 14.7.7 to resolve the issue. For Asterisk versions 15.x through 15.6.0, update to a version later than 15.6.0 to resolve the issue. For Certified Asterisk versions 13.21-cert2 and earlier, update to a version later than 13.21-cert2 to resolve the issue.

Fix

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2018-17281

DLA-1523-1

DSA-4320-1

Affected Products

Asterisk

References · 31

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7286 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7284 · Security Note
• https://osv.dev/vulnerability/DSA-4320-1 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-1523-1 · Vendor Advisory
• https://security.gentoo.org/glsa/201811-11 · Vendor Advisory
• http://seclists.org/fulldisclosure/2018/Sep/31 · Patch
• https://security-tracker.debian.org/tracker/DLA-1523-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-17281 · Vendor Advisory
• https://debian.org/security/2018/dsa-4320 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-17281 · Security Note
• https://cve.org/CVERecord?id=CVE-2018-17281 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17281 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2018-17281 · Vendor Advisory
• https://seclists.org/bugtraq/2018/Sep/53 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2018-17281 · Vendor Advisory