CVE-2018-7287

An issue was discovered in res_http_websocket.c in Asterisk 15.x through 15.2.1

published February 22, 2018

CVSS
—
EPSS
11%
Percentile
96.0
In the wild
Unconfirmed
What it is

An issue was discovered in res_http_websocket.c in Asterisk 15.x through 15.2.1. If the HTTP server is enabled (default is disabled), WebSocket payloads of size 0 are mishandled (with a busy loop).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.11452 · 96.0th percentile
Published
2018-02-22T00:00Z
EPSS history
Timeline
  • 22 FEB 00:00Z
    An issue was discovered in res_http_websocket.c in Asterisk 15.x through 15.2.1
    cvelistv5