astDoS

astDoS أداة لاستغلال الثغرات CVE-2018-7284 و CVE-2018-19278 الاستخدام تُستخدم هذه الأداة كأمر. root@kitploit: astDoS.py -h -a 1,2 -sA SERVERIP -sP SERVERPORT -u USER -p PASSWD -sub SUBUSER -dA DNSIP -dP DNSPORT -v VERSION هجوم رفض الخدمة ضد Asterisk، CVE-2018-7284 و CVE-2018-19278 خيارات اختيارية...

CVE-2018-7284

creationtimestamp| type| source ---|---|--- 2018-02-27 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44184...

CVE-2018-7284

A Buffer Overflow issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5, and 15.x through 15.2.1, and Certified Asterisk through 13.18-cert2. When processing a SUBSCRIBE request, the respjsippubsub module stores the accepted formats present in the Accept headers of the request. Th...

CVE-2018-7284

A Buffer Overflow issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5, and 15.x through 15.2.1, and Certified Asterisk through 13.18-cert2. When processing a SUBSCRIBE request, the respjsippubsub module stores the accepted formats present in the Accept headers of the request. Th...

CVE-2018-7284

A Buffer Overflow issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5, and 15.x through 15.2.1, and Certified Asterisk through 13.18-cert2. When processing a SUBSCRIBE request, the respjsippubsub module stores the accepted formats present in the Accept headers of the request. Th...

CVE-2018-7284

CVE-2018-7284 affects Asterisk and Certified Asterisk; during SUBSCRIBE, res_pjsip_pubsub does not cap Accept headers (limit 32) and can write outside memory, causing a crash. Affected: 13.x–15.x releases (precise bounds in sources). Exploitation details exist (Exploit-DB), with vendor advisories...

CVE-2018-7284

A Buffer Overflow issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5, and 15.x through 15.2.1, and Certified Asterisk through 13.18-cert2. When processing a SUBSCRIBE request, the respjsippubsub module stores the accepted formats present in the Accept headers of the request. Th...