Unrated

An issue was discovered in res_http_websocket.c in Asterisk 15.x through 15.2.1. If the HTTP server is enabled (default is disabled), WebSocket payloa...

CVE-2018-7287 First seen on SecPulse Feb 22, 2018

Original description The description as published by the source.

An issue was discovered in res_http_websocket.c in Asterisk 15.x through 15.2.1. If the HTTP server is enabled (default is disabled), WebSocket payloads of size 0 are mishandled (with a busy loop).

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory downloads.digium.com
advisory securityfocus.com
advisory securitytracker.com
advisory issues.asterisk.org

Key facts

Severity: Unrated
Published: Feb 22, 2018
First seen on SecPulse: Feb 22, 2018

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:50