CVE-2018-7286 : An issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5, and 15

An issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5, and 15.x through 15.2.1, and Certified Asterisk through 13.18-cert2. res_pjsip allows remote authenticated users to crash Asterisk (segmentation fault) by sending a number of SIP INVITE messages on a TCP or TLS connection and then suddenly closing the connection.

Published 2018-02-22 00:29:01

Updated 2019-10-03 00:03:26

Source MITRE

View at NVD, CVE.org

Vulnerability category: Memory Corruption

Products affected by CVE-2018-7286

Debian » Debian Linux » Version: 9.0
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
Matching versions
Digium » Asterisk
Versions from including (>=) 14.0.0 and up to, including, (<=) 14.7.5
cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*
Matching versions
Digium » Asterisk
Versions from including (>=) 15.0.0 and up to, including, (<=) 15.2.1
cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*
Matching versions
Digium » Asterisk » Version: 13.19.1
cpe:2.3:a:digium:asterisk:13.19.1:*:*:*:*:*:*:*
Matching versions
Digium » Certified Asterisk
Versions up to, including, (<=) 13.18
cpe:2.3:a:digium:certified_asterisk:*:*:*:*:*:*:*:*
Matching versions

Threat overview for CVE-2018-7286

Top countries where our scanners detected CVE-2018-7286

Top open port discovered on systems with this issue 8088

IPs affected by CVE-2018-7286 734

Threat actors abusing to this issue? Yes

Find out if you^* are affected by CVE-2018-7286!

^*Directly or indirectly through your vendors, service providers and 3rd parties. Powered by attack surface intelligence from SecurityScorecard.

Exploit prediction scoring system (EPSS) score for CVE-2018-7286

EPSS FAQ

20.65%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 96 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2018-7286

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.0	MEDIUM	AV:N/AC:L/Au:S/C:N/I:N/A:P	8.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: Single Confidentiality Impact: None Integrity Impact: None Availability Impact: Partial
6.5	MEDIUM	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	2.8	3.6	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

References for CVE-2018-7286

http://www.securityfocus.com/bid/103129

Multiple Asterisk Products CVE-2018-7286 Denial of Service Vulnerability
Third Party Advisory;VDB Entry
http://www.securitytracker.com/id/1040417

Asterisk Transport Connection Error Lets Remote Authenticated Users Cause the Target Service to Crash - SecurityTracker
Third Party Advisory;VDB Entry
https://www.exploit-db.com/exploits/44181/

Asterisk chan_pjsip 15.2.0 - 'INVITE' Denial of Service
Exploit;VDB Entry;Third Party Advisory
http://downloads.asterisk.org/pub/security/AST-2018-005.html

AST-2018-005
Vendor Advisory
https://issues.asterisk.org/jira/browse/ASTERISK-27618

[ASTERISK-27618] Crash occurs when sending a repeated number of INVITE messages over TCP or TLS transport - Digium/Asterisk JIRA
Vendor Advisory
https://www.debian.org/security/2018/dsa-4320

Debian -- Security Information -- DSA-4320-1 asterisk
Third Party Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2018-7286

Products affected by CVE-2018-7286

Threat overview for CVE-2018-7286

Exploit prediction scoring system (EPSS) score for CVE-2018-7286

CVSS scores for CVE-2018-7286

References for CVE-2018-7286