Back to Database
Status published
Medium
CVE-2018-12228
An issue was discovered in Asterisk Open Source 15.x before...
Vulnerability Description
An issue was discovered in Asterisk Open Source 15.x before 15.4.1. When connected to Asterisk via TCP/TLS, if the client abruptly disconnects, or sends a specially crafted message, then Asterisk gets caught in an infinite loop while trying to read the data stream. This renders the system unusable.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-12228
Credits & Attribution
No credits recorded in the NVD database.
References
More from sangoma
View All →CVE-2022-42706
An issue was discovered in Sangoma Asterisk through 16.28, 17...
Unknown
0
CVE-2022-42705
A use-after-free in res_pjsip_pubsub.c in Sangoma Asterisk 16.28, 18.14, 19.6,...
Unknown
0
CVE-2022-37325
In Sangoma Asterisk through 16.28.0, 17.x and 18.x through 18.14.0,...
Unknown
0
CVE-2021-45461
FreePBX, when restapps (aka Rest Phone Apps) 15.0.19.87, 15.0.19.88, 16.0.18.40,...
Critical
9.8
CVE-2021-45310
Sangoma Technologies Corporation Switchvox Version 102409 is affected by an...
Medium
5.3
Affected Vendor
sangoma
View all reports →Affected Software
asterisk
Vulnerable Versions:
15.0
Timeline
Official Publish:
June 12th, 2018
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.