Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2015-1558

EPSS 17.45% · P95
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2015-1558

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Asterisk Open Source 12.x before 12.8.1 and 13.x before 13.1.1, when using the PJSIP channel driver, does not properly reclaim RTP ports, which allows remote authenticated users to cause a denial of service (file descriptor consumption) via an SDP offer containing only incompatible codecs.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Digium Asterisk Open Source 资源管理错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Digium Asterisk Open Source是美国Digium公司的一套开源的电话交换机(PBX)系统软件。该软件支持语音信箱、多方语音会议、交互式语音应答(IVR)等。 Digium Asterisk Open Source 12.8.1之前12.x版本和13.1.1之前13.x版本中存在安全漏洞,该漏洞源于程序使用PJSIP通道驱动程序时,没有正确回收RTP端口资源。远程攻击者可借助带有不兼容解码器的SDP offer利用该漏洞造成拒绝服务(文件描述符消耗)。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2015-1558

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2015-1558

Please Login to view more intelligence information

Same Patch Batch · n/a · 2015-02-09 · 8 CVEs total

CVE-2015-1562Saurus CMS 跨站脚本漏洞
CVE-2015-1563Xen 资源管理错误漏洞
CVE-2015-1564Plain Black WebGUI 跨站脚本漏洞
CVE-2015-1565多款Hitachi产品online help系统跨站脚本漏洞
CVE-2015-1566DotNetNuke 跨站脚本漏洞
CVE-2015-1567Drupal GD Infinite Scroll模块跨站脚本漏洞
CVE-2015-1568Drupal GD Infinite Scroll模块跨站请求伪造漏洞

IV. Related Vulnerabilities

V. Comments for CVE-2015-1558

No comments yet


Leave a comment