Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2018-19278

Buffer overflow in DNS SRV and NAPTR lookups in Digium Asterisk 15.x before 15.6.2 and 16.x before 16.0.1 allows remote attackers to crash Asterisk via a specially crafted DNS SRV or NAPTR response, because a buffer size is supposed to match an expanded length but actually matches a compressed length.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.033
EPSS Ranking 86.8%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
Products affected by CVE-2018-19278
  • Digium » Asterisk » Version: 15.0.0
    cpe:2.3:a:digium:asterisk:15.0.0
  • Digium » Asterisk » Version: 15.1.0
    cpe:2.3:a:digium:asterisk:15.1.0
  • Digium » Asterisk » Version: 15.1.2
    cpe:2.3:a:digium:asterisk:15.1.2
  • Digium » Asterisk » Version: 15.1.3
    cpe:2.3:a:digium:asterisk:15.1.3
  • Digium » Asterisk » Version: 15.1.4
    cpe:2.3:a:digium:asterisk:15.1.4
  • Digium » Asterisk » Version: 15.1.5
    cpe:2.3:a:digium:asterisk:15.1.5
  • Digium » Asterisk » Version: 15.2.0
    cpe:2.3:a:digium:asterisk:15.2.0
  • Digium » Asterisk » Version: 15.2.1
    cpe:2.3:a:digium:asterisk:15.2.1
  • Digium » Asterisk » Version: 15.2.2
    cpe:2.3:a:digium:asterisk:15.2.2
  • Digium » Asterisk » Version: 15.3.0
    cpe:2.3:a:digium:asterisk:15.3.0
  • Digium » Asterisk » Version: 15.4.0
    cpe:2.3:a:digium:asterisk:15.4.0
  • Digium » Asterisk » Version: 15.4.1
    cpe:2.3:a:digium:asterisk:15.4.1
  • Digium » Asterisk » Version: 15.5.0
    cpe:2.3:a:digium:asterisk:15.5.0
  • Digium » Asterisk » Version: 15.6.0
    cpe:2.3:a:digium:asterisk:15.6.0
  • Digium » Asterisk » Version: 15.6.1
    cpe:2.3:a:digium:asterisk:15.6.1
  • Digium » Asterisk » Version: 16.0.0
    cpe:2.3:a:digium:asterisk:16.0.0
  • Digium » Asterisk » Version: 16.0.1
    cpe:2.3:a:digium:asterisk:16.0.1


Products
Pricing
Contact Us

Shodan ® - All rights reserved