CVE-2018-7284 PoC — Digium Asterisk Open Source和Certified Asterisk 缓冲区错误漏洞

Source

Associated Vulnerability

Title: Digium Asterisk Open Source和Certified Asterisk 缓冲区错误漏洞 (CVE-2018-7284)
Description:A Buffer Overflow issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5, and 15.x through 15.2.1, and Certified Asterisk through 13.18-cert2. When processing a SUBSCRIBE request, the res_pjsip_pubsub module stores the accepted formats present in the Accept headers of the request. This code did not limit the number of headers it processed, despite having a fixed limit of 32. If more than 32 Accept headers were present, the code would write outside of its memory and cause a crash.

Description

Tool to exploit CVE-2018-7284 and CVE-2018-19278

Readme

# astDoS
Tool to exploit CVE-2018-7284 and CVE-2018-19278

## Usage
This tool is used as a command.

```
astDoS.py [-h] [-a {1,2}] [-sA SERVER_IP] [-sP SERVER_PORT] [-u USER]
                 [-p PASSWD] [-sub SUBUSER] [-dA DNS_IP] [-dP DNS_PORT]
                 [-v [VERSION]]

DoS attack against Astersisk, CVE-2018-7284 and CVE-2018-19278

optional arguments:
  -h, --help            show this help message and exit
  -a {1,2}, --attack {1,2}
                        Attack type. 1 for CVE-2018-7284 header (default
                        value). 2 for CVE-2018-19278 DNS
  -sA SERVER_IP, --server-address SERVER_IP
                        CVE-2018-7284 headers: Asterisk IP address to connect
                        to
  -sP SERVER_PORT, --server-port SERVER_PORT
                        CVE-2018-7284 headers: Astersik port to connect to
                        (5060 by default)
  -u USER, --user USER  CVE-2018-7284 headers: username to use in the attack
  -p PASSWD, --password PASSWD
                        CVE-2018-7284 headers: password to use in the attack
  -sub SUBUSER, --subscribeUser SUBUSER
                        CVE-2018-7284 headers: subscribe user to use in the
                        attack
  -dA DNS_IP, --dns-address DNS_IP
                        CVE-2018-19278 DNS: Address to bind the socket
  -dP DNS_PORT, --dns-port DNS_PORT
                        CVE-2018-19278 DNS: Port to bind the socket
  -v [VERSION], --version [VERSION]
                        Show tool version.

```

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →