Medium severity5.9OSV Advisory· Published Feb 22, 2018· Updated Jun 17, 2026
CVE-2018-7287
CVE-2018-7287
Description
An issue was discovered in res_http_websocket.c in Asterisk 15.x through 15.2.1. If the HTTP server is enabled (default is disabled), WebSocket payloads of size 0 are mishandled (with a busy loop).
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1615.0.0-beta1, 15.0.0-rc1, 15.1.0, …+ 15 more
- (no CPE)range: 15.0.0-beta1, 15.0.0-rc1, 15.1.0, …
- cpe:2.3:a:digium:asterisk:15.0.0:beta1:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:15.0.0:rc1:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:15.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:15.1.0:rc1:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:15.1.0:rc2:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:15.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:15.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:15.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:15.1.4:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:15.1.5:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:15.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:15.2.0:rc1:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:15.2.0:rc2:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:15.2.1:*:*:*:*:*:*:*
- (no CPE)range: <=15.2.1
Patches
Vulnerability mechanics
References
4- downloads.digium.com/pub/security/AST-2018-006.htmlnvdVendor Advisory
- www.securityfocus.com/bid/103120nvdThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1040419nvdThird Party AdvisoryVDB Entry
- issues.asterisk.org/jira/browse/ASTERISK-27658nvdVendor Advisory
News mentions
0No linked articles in our index yet.