Main
Vulnerability Database
Exploits
ID:6418 - Exploit for Improper input validation in Asterisk Open Source - CVE-2018-7284
ID:6418 - Exploit for Improper input validation in Asterisk Open Source - CVE-2018-7284
Published: June 17, 2021
Vulnerability identifier: #VU10698
Vulnerability risk: Low
CVE-ID: CVE-2018-7284
CWE-ID: CWE-20
Exploitation vector: Remote access
Vulnerable software:
Asterisk Open Source
Asterisk Open Source
Link to public exploit:
Vulnerability description
The vulnerability allows a remote attacker to cause DoS condition on the target system.
The weakness exists due to improper input validation. A remote attacker can send a SUBSCRIBE request with specially crafted Accept headersб trigger a flaw in the 'res_pjsip_pubsub' module and cause the target service to crash.
The weakness exists due to improper input validation. A remote attacker can send a SUBSCRIBE request with specially crafted Accept headersб trigger a flaw in the 'res_pjsip_pubsub' module and cause the target service to crash.
Remediation
Update to version 13.19.2, 14.7.6, 15.2.2.