Denial of Service Vulnerability in Asterisk Open Source 15.x

CVE-2018-12228 · MEDIUM Severity

AV:N/AC:L/AU:S/C:N/I:N/A:C

An issue was discovered in Asterisk Open Source 15.x before 15.4.1. When connected to Asterisk via TCP/TLS, if the client abruptly disconnects, or sends a specially crafted message, then Asterisk gets caught in an infinite loop while trying to read the data stream. This renders the system unusable.

Learn more about our Open Source Audit.