Asterisk Denial of Service (CVE-2018-12228)

A denial-of-service vulnerability has been reported in Asterisk. The vulnerability is due to improper handling of client abrupt disconnection or client-supplied messages when client is connecting via TLS. A remote user can exploit the vulnerability by abruptly disconnecting or sending specially...

CVE-2018-12228

An issue was discovered in Asterisk Open Source 15.x before 15.4.1. When connected to Asterisk via TCP/TLS, if the client abruptly disconnects, or sends a specially crafted message, then Asterisk gets caught in an infinite loop while trying to read the data stream. This renders the system unusabl...

CVE-2018-12228

CVE-2018-12228 affects Asterisk Open Source 15.x before 15.4.1. When connected via TCP/TLS, if the client disconnects abruptly or sends a specially crafted message, Asterisk can enter an infinite loop while reading the data stream, resulting in a denial of service and rendering the system unusabl...