Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
There is a stack consumption vulnerability in the res_http_websocket.so module of Asterisk through 13.23.0, 14.7.x through 14.7.7, and 15.x through 15.6.0 and Certified Asterisk through 13.21-cert2. It allows an attacker to crash Asterisk via a specially crafted HTTP request to upgrade the connection to a websocket.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Digium Asterisk和Certified Asterisk res_http_websocket.so模块安全漏洞
Vulnerability Description
Digium Asterisk和Certified Asterisk都是美国Digium公司的开源电话交换机（PBX）系统软件。该软件支持语音信箱、多方语音会议、交互式语音应答(IVR)等。 Digium公 Asterisk和Certified Asterisk中的res_http_websocket.so模块存在安全漏洞。攻击者可通过发送特制的HTTP请求利用该漏洞造成Asterisk崩溃。以下产品和版本受到影响：Digium公 Asterisk 13.23.0及之前版本，14.7.x版本至14.7.7
CVSS Information
N/A
Vulnerability Type
N/A