Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2018-17281

EPSS 80.26% · P99
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2018-17281

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
There is a stack consumption vulnerability in the res_http_websocket.so module of Asterisk through 13.23.0, 14.7.x through 14.7.7, and 15.x through 15.6.0 and Certified Asterisk through 13.21-cert2. It allows an attacker to crash Asterisk via a specially crafted HTTP request to upgrade the connection to a websocket.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Digium Asterisk和Certified Asterisk res_http_websocket.so模块安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Digium Asterisk和Certified Asterisk都是美国Digium公司的开源电话交换机（PBX）系统软件。该软件支持语音信箱、多方语音会议、交互式语音应答(IVR)等。 Digium公 Asterisk和Certified Asterisk中的res_http_websocket.so模块存在安全漏洞。攻击者可通过发送特制的HTTP请求利用该漏洞造成Asterisk崩溃。以下产品和版本受到影响：Digium公 Asterisk 13.23.0及之前版本，14.7.x版本至14.7.7
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Shenlong Deep Dive — AI Deep Analysis

10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.

Read summary Full analysis (login)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2018-17281

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2018-17281

请登录查看更多情报信息。

Same Patch Batch · n/a · 2018-09-24 · 15 CVEs total

CVE-2018-17434HDF5 安全漏洞
CVE-2018-17437HDF5 安全漏洞
CVE-2018-17432HDF5 安全漏洞
CVE-2018-17433HDF5 缓冲区错误漏洞
CVE-2018-17435HDF5 缓冲区错误漏洞
CVE-2018-17436HDF5 安全漏洞
CVE-2018-17438HDF5 安全漏洞
CVE-2018-17439HDF5 缓冲区错误漏洞
CVE-2015-8298RXTEC RXAdmin UPDATE SQL注入漏洞
CVE-2018-12975CryptoSaga 安全漏洞
CVE-2018-13140Druide Antidote 安全漏洞
CVE-2018-16283WordPress Wechat Broadcast 路径遍历漏洞
CVE-2018-16299WordPress Localize My Post 路径遍历漏洞
CVE-2018-17107Tgstation tgstation-server 安全漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2018-17281

No comments yet

Leave a comment