CVE-2018-19278
Buffer overflow in DNS SRV and NAPTR lookups in Digium Asterisk 15.x before 15.6.2 and 16.x...
Buffer overflow in DNS SRV and NAPTR lookups in Digium Asterisk 15.x before 15.6.2 and 16.x before 16.0.1 allows remote attackers to crash Asterisk via a specially crafted DNS SRV or NAPTR response, because a buffer size is supposed to match an expanded length but actually matches a compressed length.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Buffer overflow in DNS SRV and NAPTR lookups in Digium Asterisk 15.x before 15.6.2 and 16.x before 16.0.1 allows remote attackers to crash Asterisk via a specially crafted DNS SRV or NAPTR response, because a buffer size is supposed to match an expanded length but actually matches a compressed length.
- Record
CVE-2018-19278- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Buffer overflow in DNS SRV and NAPTR lookups in Digium Asterisk 15.x before 15.6.2 and 16.x before 16.0.1 allows remote attackers to crash Asterisk via a specially crafted DNS SRV or NAPTR response, because a buffer size is supposed to match an expanded length but actually matches a compressed length.
- Record
CVE-2018-19278- Updated
- 2026-11-02
EUVDEUVD-2018-10983 No score
Buffer overflow in DNS SRV and NAPTR lookups in Digium Asterisk 15.x before 15.6.2 and 16.x before 16.0.1 allows remote attackers to crash Asterisk via a specially crafted DNS SRV or NAPTR response, because a buffer size is supposed to match an expanded length but actually matches a compressed length.
- Record
EUVD-2018-10983- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-47fm-v3pv-gm8p
Buffer overflow in DNS SRV and NAPTR lookups in Digium Asterisk 15.x before 15.6.2 and 16.x...
Buffer overflow in DNS SRV and NAPTR lookups in Digium Asterisk 15.x before 15.6.2 and 16.x before 16.0.1 allows remote attackers to crash Asterisk via a specially crafted DNS SRV or NAPTR response, because a buffer size is supposed to match an expanded length but actually matches a compressed length.
- Record
GHSA-47fm-v3pv-gm8p- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-119
- Updated
- 2026-11-02
OSVALPINE-CVE-2018-19278
Buffer overflow in DNS SRV and NAPTR lookups in Digium Asterisk 15.x before 15.6.2 and 16.x before 16.0.1 allows remote attackers to crash Asterisk via a specially crafted DNS SRV or NAPTR response, because a buffer size is supposed to match an expanded length but actually matches a compressed length.
- Record
ALPINE-CVE-2018-19278- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSV
Buffer overflow in DNS SRV and NAPTR lookups in Digium Asterisk 15.x before 15.6.2 and 16.x before 16.0.1 allows remote attackers to crash Asterisk via a specially crafted DNS SRV or NAPTR response, because a buffer size is supposed to match an expanded length but actually matches a compressed length.
- Record
CVE-2018-19278- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
asteriskAlpine:v3.10 |
before 15.7.1-r0 | 15.7.1-r0 |
asteriskAlpine:v3.11 |
before 15.7.1-r0 | 15.7.1-r0 |
asteriskAlpine:v3.12 |
before 15.7.1-r0 | 15.7.1-r0 |
asteriskAlpine:v3.13 |
before 15.7.1-r0 | 15.7.1-r0 |
asteriskAlpine:v3.14 |
before 15.7.1-r0 | 15.7.1-r0 |
asteriskAlpine:v3.15 |
before 15.7.1-r0 | 15.7.1-r0 |
asteriskAlpine:v3.16 |
before 15.7.1-r0 | 15.7.1-r0 |
asteriskAlpine:v3.17 |
before 15.7.1-r0 | 15.7.1-r0 |
asteriskAlpine:v3.18 |
before 15.7.1-r0 | 15.7.1-r0 |
asteriskAlpine:v3.19 |
before 15.7.1-r0 | 15.7.1-r0 |
Show 8 moreShow less
| Package | Affected | Fixed |
|---|---|---|
asteriskAlpine:v3.20 |
before 15.7.1-r0 | 15.7.1-r0 |
asteriskAlpine:v3.21 |
before 15.7.1-r0 | 15.7.1-r0 |
asteriskAlpine:v3.22 |
before 15.7.1-r0 | 15.7.1-r0 |
asteriskAlpine:v3.23 |
before 15.7.1-r0 | 15.7.1-r0 |
asteriskAlpine:v3.24 |
before 15.7.1-r0 | 15.7.1-r0 |
asteriskAlpine:v3.7 |
before 15.6.2-r0 | 15.6.2-r0 |
asteriskAlpine:v3.8 |
before 15.6.2-r0 | 15.6.2-r0 |
asteriskAlpine:v3.9 |
before 15.7.1-r0 | 15.7.1-r0 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2018-19278 is a high vulnerability (CVSS 7.5) in Digium Asterisk, published November 14, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.58%, the 89th percentile. Fixed in asterisk 15.7.1-r0.