CVE-2018-19278

Buffer overflow in DNS SRV and NAPTR lookups in Digium Asterisk 15.x before 15.6.2 and 16.x before 16.0.1 allows remote attackers to crash Asterisk via a…

published November 14, 2018

CVSS
—
EPSS
4%
Percentile
89.3
In the wild
Unconfirmed
What it is

Buffer overflow in DNS SRV and NAPTR lookups in Digium Asterisk 15.x before 15.6.2 and 16.x before 16.0.1 allows remote attackers to crash Asterisk via a specially crafted DNS SRV or NAPTR response, because a buffer size is supposed to match an expanded length but actually matches a compressed length.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03579 · 89.3th percentile
Published
2018-11-14T20:00Z
EPSS history
Timeline
  • 14 NOV 20:00Z
    Buffer overflow in DNS SRV and NAPTR lookups in Digium Asterisk 15.x before 15.6.2 and 16.x before 16.0.1 allows remote attackers to crash Asterisk via a…
    cvelistv5