CVE-2018-12228

An issue was discovered in Asterisk Open Source 15.x before 15.4.1. When connected to Asterisk via TCP/TLS, if the client abruptly disconnects, or sends a specially crafted message, then Asterisk gets caught in an infinite loop while trying to read the data stream. This renders the system unusable.

Score

CVSS 3.0 6.5 Medium

Status

Modified - cve@mitre.org

Published

2018-06-12

Last modified

2024-08-05

Weaknesses

CWE-835

Affected products

• Asterisk (Sangoma)

References

• http://downloads.asterisk.org/pub/security/AST-2018-007.html
• http://www.securityfocus.com/bid/104457
• https://issues.asterisk.org/jira/browse/ASTERISK-27807