VYPR
← All advisories
High severity7.5OSV Advisory· Published Nov 14, 2018· Updated Jun 17, 2026

CVE-2018-19278

CVE-2018-19278

Description

Buffer overflow in DNS SRV and NAPTR lookups in Digium Asterisk 15.x before 15.6.2 and 16.x before 16.0.1 allows remote attackers to crash Asterisk via a specially crafted DNS SRV or NAPTR response, because a buffer size is supposed to match an expanded length but actually matches a compressed length.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

32
  • Digium/AsteriskOSV32 versions
    15.0.0, 15.0.0-beta1, 15.0.0-rc1, …+ 31 more
    • (no CPE)range: 15.0.0, 15.0.0-beta1, 15.0.0-rc1, …
    • cpe:2.3:a:digium:asterisk:15.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:15.0.0:b1:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:15.0.0:rc1:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:15.1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:15.1.0:rc1:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:15.1.0:rc2:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:15.1.2:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:15.1.3:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:15.1.4:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:15.1.5:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:15.2.0:rc1:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:15.2.0:rc2:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:15.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:15.2.2:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:15.3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:15.3.0:rc1:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:15.3.0:rc2:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:15.4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:15.4.0:rc1:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:15.4.0:rc2:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:15.4.1:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:15.5.0:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:15.5.0:rc1:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:15.6.0:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:15.6.0:rc1:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:15.6.1:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:16.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:16.0.0:rc2:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:16.0.0:rc3:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:16.0.1:rc1:*:*:*:*:*:*
    • (no CPE)range: <15.6.2, <16.0.1

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.