Skip to content
OpenAdvisories
Medium WID-SEC-2026-0838 6 CVEs

Asterisk: Schwachstelle ermöglicht Denial of Service

Published Feb 21, 2018 · Updated Mar 24, 2026 · Revision 5 · de-DE

Vendor: Debian Vendor: Digium Vendor: Ubuntu Product: Certified Asterisk Product: Linux Product: Linux Platform: Linux

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Asterisk ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

Asterisk ist eine komplette Open Source Multiprotokoll Telefonanlage (PBX) auf Softwarebasis.

Vulnerabilities 6

  • Unscored —
    CVE-2018-1000098

    Teluu PJSIP version 2.7.1 and earlier contains a Integer Overflow vulnerability in pjmedia SDP parsing that can result …

    pjproject Ubuntu
  • Unscored —
    CVE-2018-1000099

    Teluu PJSIP version 2.7.1 and earlier contains a Access of Null/Uninitialized Pointer vulnerability in pjmedia SDP pars…

    pjproject Ubuntu
  • Unscored —
    CVE-2018-7284 Public exploit EPSS 66%

    A Buffer Overflow issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5, and 15.x through 15.2.1, and C…

    asterisk asterisk Debian Ubuntu
  • Unscored —
    CVE-2018-7285

    A NULL pointer access issue was discovered in Asterisk 15.x through 15.2.1. The RTP support in Asterisk maintains its o…

  • Unscored —
    CVE-2018-7286 Public exploit EPSS 53%

    An issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5, and 15.x through 15.2.1, and Certified Asteri…

    asterisk asterisk Debian Ubuntu
  • Unscored —
    CVE-2018-7287 EPSS 11%

    An issue was discovered in res_http_websocket.c in Asterisk 15.x through 15.2.1. If the HTTP server is enabled (default…

Revision history

  1. #5

    Neue Updates von Ubuntu aufgenommen

  2. #4

    New remediations available

  3. #3

    cve added

  4. #1

    Initial Release

  5. #2

    Version nicht vorhanden

References