A memory exhaustion vulnerability exists in Asterisk Open Source 13.x before 13.15.1 and 14.x before 14.4.1 and Certified Asterisk 13.13 before 13.13-cert4, which can be triggered by sending specially crafted SCCP packets causing an infinite loop and leading to memory exhaustion (by message logging in that loop).
References
| Link | Resource |
|---|---|
| http://downloads.asterisk.org/pub/security/AST-2017-004.txt | Third Party Advisory |
| http://www.securityfocus.com/bid/98573 | Third Party Advisory VDB Entry |
| http://www.securitytracker.com/id/1038531 | |
| https://bugs.debian.org/863906 | Mailing List Third Party Advisory |
| http://downloads.asterisk.org/pub/security/AST-2017-004.txt | Third Party Advisory |
| http://www.securityfocus.com/bid/98573 | Third Party Advisory VDB Entry |
| http://www.securitytracker.com/id/1038531 | |
| https://bugs.debian.org/863906 | Mailing List Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
History
21 Nov 2024, 03:35
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://downloads.asterisk.org/pub/security/AST-2017-004.txt - Third Party Advisory | |
| References | () http://www.securityfocus.com/bid/98573 - Third Party Advisory, VDB Entry | |
| References | () http://www.securitytracker.com/id/1038531 - | |
| References | () https://bugs.debian.org/863906 - Mailing List, Third Party Advisory |
15 Aug 2024, 12:44
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:asterisk:open_source:13.11.0:rc1:*:*:*:*:*:* cpe:2.3:a:asterisk:open_source:14.1.0:rc1:*:*:*:*:*:* cpe:2.3:a:asterisk:open_source:13.2.0:rc1:*:*:*:*:*:* cpe:2.3:a:asterisk:open_source:13.10.0:rc1:*:*:*:*:*:* cpe:2.3:a:asterisk:open_source:14.4.0:rc1:*:*:*:*:*:* cpe:2.3:a:asterisk:open_source:13.7.0:rc1:*:*:*:*:*:* cpe:2.3:a:asterisk:open_source:13.8.1:*:*:*:*:*:*:* cpe:2.3:a:asterisk:open_source:14.2.1:*:*:*:*:*:*:* cpe:2.3:a:asterisk:open_source:13.12.0:*:*:*:*:*:*:* cpe:2.3:a:asterisk:open_source:14.3.0:rc1:*:*:*:*:*:* cpe:2.3:a:asterisk:open_source:13.12.0:rc1:*:*:*:*:*:* cpe:2.3:a:asterisk:open_source:13.5.0:rc1:*:*:*:*:*:* cpe:2.3:a:asterisk:open_source:13.8.0:rc1:*:*:*:*:*:* cpe:2.3:a:asterisk:open_source:13.12.1:*:*:*:*:*:*:* cpe:2.3:a:asterisk:open_source:14.0.0:beta2:*:*:*:*:*:* cpe:2.3:a:asterisk:open_source:13.1.0:rc1:*:*:*:*:*:* cpe:2.3:a:asterisk:open_source:13.0.0:*:*:*:*:*:*:* cpe:2.3:a:asterisk:open_source:13.8.2:*:*:*:*:*:*:* cpe:2.3:a:asterisk:open_source:13.9.0:*:*:*:*:*:*:* cpe:2.3:a:asterisk:open_source:14.2.0:rc2:*:*:*:*:*:* cpe:2.3:a:asterisk:open_source:13.14.0:rc1:*:*:*:*:*:* cpe:2.3:a:asterisk:open_source:14.0.0:rc1:*:*:*:*:*:* cpe:2.3:a:asterisk:open_source:13.6.0:rc1:*:*:*:*:*:* cpe:2.3:a:asterisk:open_source:13.2.0:*:*:*:*:*:*:* cpe:2.3:a:asterisk:open_source:13.1.0:rc2:*:*:*:*:*:* cpe:2.3:a:asterisk:open_source:13.4.0:*:*:*:*:*:*:* cpe:2.3:a:asterisk:open_source:13.12.2:*:*:*:*:*:*:* cpe:2.3:a:asterisk:open_source:13.15.0:rc1:*:*:*:*:*:* cpe:2.3:a:asterisk:open_source:14.0.0:beta1:*:*:*:*:*:* cpe:2.3:a:asterisk:open_source:14.2.0:*:*:*:*:*:*:* cpe:2.3:a:asterisk:open_source:13.8.0:*:*:*:*:*:*:* cpe:2.3:a:asterisk:open_source:13.7.0:*:*:*:*:*:*:* cpe:2.3:a:asterisk:open_source:13.3.0:rc1:*:*:*:*:*:* cpe:2.3:a:asterisk:open_source:13.9.0:rc1:*:*:*:*:*:* cpe:2.3:a:asterisk:open_source:13.13.0:rc1:*:*:*:*:*:* cpe:2.3:a:asterisk:open_source:14.0.0:*:*:*:*:*:*:* cpe:2.3:a:asterisk:open_source:13.4.0:rc1:*:*:*:*:*:* cpe:2.3:a:asterisk:open_source:14.2.0:rc1:*:*:*:*:*:* cpe:2.3:a:asterisk:open_source:13.1.0:*:*:*:*:*:*:* |
cpe:2.3:a:sangoma:asterisk:13.2.0:*:*:*:*:*:*:* cpe:2.3:a:sangoma:asterisk:13.13.0:rc1:*:*:*:*:*:* cpe:2.3:a:sangoma:asterisk:13.8.0:rc1:*:*:*:*:*:* cpe:2.3:a:sangoma:asterisk:13.1.0:*:*:*:*:*:*:* cpe:2.3:a:sangoma:asterisk:13.8.1:*:*:*:*:*:*:* cpe:2.3:a:sangoma:asterisk:13.14.0:rc1:*:*:*:*:*:* cpe:2.3:a:sangoma:asterisk:13.15.0:rc1:*:*:*:*:*:* cpe:2.3:a:sangoma:asterisk:14.2.0:rc1:*:*:*:*:*:* cpe:2.3:a:sangoma:asterisk:13.8.0:*:*:*:*:*:*:* cpe:2.3:a:sangoma:asterisk:13.12.1:*:*:*:*:*:*:* cpe:2.3:a:sangoma:asterisk:13.11.0:rc1:*:*:*:*:*:* cpe:2.3:a:sangoma:asterisk:13.7.0:rc1:*:*:*:*:*:* cpe:2.3:a:sangoma:asterisk:13.6.0:rc1:*:*:*:*:*:* cpe:2.3:a:sangoma:asterisk:13.8.2:*:*:*:*:*:*:* cpe:2.3:a:sangoma:asterisk:13.9.0:rc1:*:*:*:*:*:* cpe:2.3:a:sangoma:asterisk:14.0.0:beta2:*:*:*:*:*:* cpe:2.3:a:sangoma:asterisk:13.12.0:rc1:*:*:*:*:*:* cpe:2.3:a:sangoma:asterisk:13.0.0:*:*:*:*:*:*:* cpe:2.3:a:sangoma:asterisk:14.0.0:rc1:*:*:*:*:*:* cpe:2.3:a:sangoma:asterisk:13.10.0:rc1:*:*:*:*:*:* cpe:2.3:a:sangoma:asterisk:14.1.0:rc1:*:*:*:*:*:* cpe:2.3:a:sangoma:asterisk:13.12.0:*:*:*:*:*:*:* cpe:2.3:a:sangoma:asterisk:14.2.1:*:*:*:*:*:*:* cpe:2.3:a:sangoma:asterisk:14.4.0:rc1:*:*:*:*:*:* cpe:2.3:a:sangoma:asterisk:13.7.0:*:*:*:*:*:*:* cpe:2.3:a:sangoma:asterisk:13.1.0:rc1:*:*:*:*:*:* cpe:2.3:a:sangoma:asterisk:14.0.0:*:*:*:*:*:*:* cpe:2.3:a:sangoma:asterisk:13.1.0:rc2:*:*:*:*:*:* cpe:2.3:a:sangoma:asterisk:13.9.0:*:*:*:*:*:*:* cpe:2.3:a:sangoma:asterisk:14.2.0:rc2:*:*:*:*:*:* cpe:2.3:a:sangoma:asterisk:14.3.0:rc1:*:*:*:*:*:* cpe:2.3:a:sangoma:asterisk:13.5.0:rc1:*:*:*:*:*:* cpe:2.3:a:sangoma:asterisk:14.0.0:beta1:*:*:*:*:*:* cpe:2.3:a:sangoma:asterisk:13.3.0:rc1:*:*:*:*:*:* cpe:2.3:a:sangoma:asterisk:13.5.0:*:*:*:*:*:*:* cpe:2.3:a:sangoma:asterisk:13.2.0:rc1:*:*:*:*:*:* cpe:2.3:a:sangoma:asterisk:14.2.0:*:*:*:*:*:*:* cpe:2.3:a:sangoma:asterisk:13.4.0:*:*:*:*:*:*:* cpe:2.3:a:sangoma:asterisk:13.4.0:rc1:*:*:*:*:*:* cpe:2.3:a:sangoma:asterisk:13.12.2:*:*:*:*:*:*:* |
| First Time |
Sangoma
Sangoma asterisk |
Information
Published : 2017-06-02 05:29
Updated : 2024-11-21 03:35
NVD link : CVE-2017-9358
Mitre link : CVE-2017-9358
CVE.ORG link : CVE-2017-9358
JSON object : View
Products Affected
asterisk
- certified_asterisk
sangoma
- asterisk
CWE
CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop')