Lucene search
HistoryOct 10, 2017 - 1:30 a.m.
CVE-2017-14603
cve
asterisk
security
rtcp
validation
vulnerability
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
7.5 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
56.8%
In Asterisk 11.x before 11.25.3, 13.x before 13.17.2, and 14.x before 14.6.2 and Certified Asterisk 11.x before 11.6-cert18 and 13.x before 13.13-cert6, insufficient RTCP packet validation could allow reading stale buffer contents and when combined with the “nat” and “symmetric_rtp” options allow redirecting where Asterisk sends the next RTCP report.
Affected configurations
Node
digiumasteriskMatch13.0.0lts
ORdigiumasteriskMatch13.0.0beta1
ORdigiumasteriskMatch13.0.0beta2
ORdigiumasteriskMatch13.0.0beta3
ORdigiumasteriskMatch13.0.1
ORdigiumasteriskMatch13.0.2
ORdigiumasteriskMatch13.1.0
ORdigiumasteriskMatch13.1.0rc1
ORdigiumasteriskMatch13.1.0rc2
ORdigiumasteriskMatch13.1.1
ORdigiumasteriskMatch13.2.0
ORdigiumasteriskMatch13.2.0rc1
ORdigiumasteriskMatch13.2.1
ORdigiumasteriskMatch13.3.0rc1
ORdigiumasteriskMatch13.3.2
ORdigiumasteriskMatch13.4.0
ORdigiumasteriskMatch13.4.0rc1
ORdigiumasteriskMatch13.5.0
ORdigiumasteriskMatch13.5.0rc1
ORdigiumasteriskMatch13.6.0rc1
ORdigiumasteriskMatch13.7.0rc1
ORdigiumasteriskMatch13.7.0rc2
ORdigiumasteriskMatch13.7.1
ORdigiumasteriskMatch13.7.2
ORdigiumasteriskMatch13.8.0
ORdigiumasteriskMatch13.8.0rc1
ORdigiumasteriskMatch13.8.1
ORdigiumasteriskMatch13.8.2
ORdigiumasteriskMatch13.9.0
ORdigiumasteriskMatch13.9.1
ORdigiumasteriskMatch13.10.0
ORdigiumasteriskMatch13.10.0rc1
ORdigiumasteriskMatch13.11.0
ORdigiumasteriskMatch13.11.1
ORdigiumasteriskMatch13.11.2
ORdigiumasteriskMatch13.12
ORdigiumasteriskMatch13.12.0
ORdigiumasteriskMatch13.12.1
ORdigiumasteriskMatch13.12.2
ORdigiumasteriskMatch13.13
ORdigiumasteriskMatch13.13.0
ORdigiumasteriskMatch13.13.1
ORdigiumasteriskMatch13.14.0
ORdigiumasteriskMatch13.14.0rc1
ORdigiumasteriskMatch13.14.0rc2
ORdigiumasteriskMatch13.14.1
ORdigiumasteriskMatch13.15.0
ORdigiumasteriskMatch13.15.0rc1
ORdigiumasteriskMatch13.15.0rc2
ORdigiumasteriskMatch13.15.0rc3
ORdigiumasteriskMatch13.15.1
ORdigiumasteriskMatch13.16.0
ORdigiumasteriskMatch13.16.0rc1
ORdigiumasteriskMatch13.16.0rc2
ORdigiumasteriskMatch13.17.0
ORdigiumasteriskMatch13.17.0rc1
Node
digiumasteriskMatch14.0
ORdigiumasteriskMatch14.0.0
ORdigiumasteriskMatch14.0.0beta1
ORdigiumasteriskMatch14.0.0beta2
ORdigiumasteriskMatch14.0.0rc1
ORdigiumasteriskMatch14.0.0rc2
ORdigiumasteriskMatch14.0.1
ORdigiumasteriskMatch14.0.2
ORdigiumasteriskMatch14.1
ORdigiumasteriskMatch14.01
ORdigiumasteriskMatch14.1.0
ORdigiumasteriskMatch14.1.1
ORdigiumasteriskMatch14.1.2
ORdigiumasteriskMatch14.02
ORdigiumasteriskMatch14.2
ORdigiumasteriskMatch14.2.0
ORdigiumasteriskMatch14.2.1
ORdigiumasteriskMatch14.3.0
ORdigiumasteriskMatch14.3.0rc1
ORdigiumasteriskMatch14.3.0rc2
ORdigiumasteriskMatch14.3.1
ORdigiumasteriskMatch14.4.0
ORdigiumasteriskMatch14.4.0rc1
ORdigiumasteriskMatch14.4.0rc2
ORdigiumasteriskMatch14.4.0rc3
ORdigiumasteriskMatch14.4.1
ORdigiumasteriskMatch14.5.0
ORdigiumasteriskMatch14.5.0rc1
ORdigiumasteriskMatch14.5.0rc2
ORdigiumasteriskMatch14.6.0
ORdigiumasteriskMatch14.6.0rc1
Node
digiumasteriskMatch11.0.0
ORdigiumasteriskMatch11.0.0beta1
ORdigiumasteriskMatch11.0.0beta2
ORdigiumasteriskMatch11.0.0rc1
ORdigiumasteriskMatch11.0.0rc2
ORdigiumasteriskMatch11.0.1
ORdigiumasteriskMatch11.0.2
ORdigiumasteriskMatch11.1.0
ORdigiumasteriskMatch11.1.0rc1
ORdigiumasteriskMatch11.1.0rc2
ORdigiumasteriskMatch11.1.0rc3
ORdigiumasteriskMatch11.1.1
ORdigiumasteriskMatch11.1.2
ORdigiumasteriskMatch11.2.0rc1
ORdigiumasteriskMatch11.2.1
ORdigiumasteriskMatch11.2.2
ORdigiumasteriskMatch11.4.0rc4
ORdigiumasteriskMatch11.6.0
ORdigiumasteriskMatch11.6.0rc1
ORdigiumasteriskMatch11.6.0rc2
ORdigiumasteriskMatch11.6.1
ORdigiumasteriskMatch11.7.0
ORdigiumasteriskMatch11.7.0rc1
ORdigiumasteriskMatch11.7.0rc2
ORdigiumasteriskMatch11.8.0-
ORdigiumasteriskMatch11.8.0rc1
ORdigiumasteriskMatch11.8.0rc2
ORdigiumasteriskMatch11.8.0rc3
ORdigiumasteriskMatch11.8.1
ORdigiumasteriskMatch11.9.0
ORdigiumasteriskMatch11.9.0rc1
ORdigiumasteriskMatch11.9.0rc2
ORdigiumasteriskMatch11.9.0rc3
ORdigiumasteriskMatch11.10.0
ORdigiumasteriskMatch11.10.0rc1
ORdigiumasteriskMatch11.10.1
ORdigiumasteriskMatch11.10.1rc1
ORdigiumasteriskMatch11.10.2
ORdigiumasteriskMatch11.11.0
ORdigiumasteriskMatch11.11.0rc1
ORdigiumasteriskMatch11.12.0
ORdigiumasteriskMatch11.12.0rc1
ORdigiumasteriskMatch11.12.1
ORdigiumasteriskMatch11.13.0
ORdigiumasteriskMatch11.13.0rc1
ORdigiumasteriskMatch11.13.1
ORdigiumasteriskMatch11.14.0lts
ORdigiumasteriskMatch11.14.0rc1
ORdigiumasteriskMatch11.14.0rc2
ORdigiumasteriskMatch11.14.1
ORdigiumasteriskMatch11.14.2
ORdigiumasteriskMatch11.15.0rc1
ORdigiumasteriskMatch11.15.0rc2
ORdigiumasteriskMatch11.15.1
ORdigiumasteriskMatch11.16.0rc1
ORdigiumasteriskMatch11.17.0rc1
ORdigiumasteriskMatch11.17.1
ORdigiumasteriskMatch11.18.0
ORdigiumasteriskMatch11.18.0rc1
ORdigiumasteriskMatch11.19.0rc1
ORdigiumasteriskMatch11.20.0rc1
ORdigiumasteriskMatch11.21.0rc1
ORdigiumasteriskMatch11.21.0rc2
ORdigiumasteriskMatch11.21.1
ORdigiumasteriskMatch11.21.2
ORdigiumasteriskMatch11.22.0
ORdigiumasteriskMatch11.22.0rc1
ORdigiumasteriskMatch11.23.0
ORdigiumasteriskMatch11.23.0rc1
ORdigiumasteriskMatch11.23.1
ORdigiumasteriskMatch11.24.0
ORdigiumasteriskMatch11.24.1
ORdigiumasteriskMatch11.25.0
ORdigiumasteriskMatch11.25.1
Node
digiumcertified_asteriskMatch11.6cert1
ORdigiumcertified_asteriskMatch11.6cert1_rc1
ORdigiumcertified_asteriskMatch11.6cert1_rc2
ORdigiumcertified_asteriskMatch11.6cert10
ORdigiumcertified_asteriskMatch11.6cert11
ORdigiumcertified_asteriskMatch11.6cert12
ORdigiumcertified_asteriskMatch11.6cert13
ORdigiumcertified_asteriskMatch11.6cert14
ORdigiumcertified_asteriskMatch11.6cert14_rc1
ORdigiumcertified_asteriskMatch11.6cert14_rc2
ORdigiumcertified_asteriskMatch11.6cert15
ORdigiumcertified_asteriskMatch11.6cert16
ORdigiumcertified_asteriskMatch11.6cert2
ORdigiumcertified_asteriskMatch11.6cert3
ORdigiumcertified_asteriskMatch11.6cert4
ORdigiumcertified_asteriskMatch11.6cert5
ORdigiumcertified_asteriskMatch11.6cert6
ORdigiumcertified_asteriskMatch11.6cert7
ORdigiumcertified_asteriskMatch11.6cert8
ORdigiumcertified_asteriskMatch11.6cert9
Node
digiumcertified_asteriskMatch13.13cert1
ORdigiumcertified_asteriskMatch13.13cert1_rc1
ORdigiumcertified_asteriskMatch13.13cert1_rc2
ORdigiumcertified_asteriskMatch13.13cert1_rc3
ORdigiumcertified_asteriskMatch13.13cert1_rc4
ORdigiumcertified_asteriskMatch13.13cert2
ORdigiumcertified_asteriskMatch13.13cert3
ORdigiumcertified_asteriskMatch13.13cert4
Related
cvelist
cvelist
CVE-2017-14603
2017-10-09 14:00:00
nessus
nessus
osv
osv
CVE-2017-14603
2017-10-10 01:30:21
asterisk - security update
2017-10-03 00:00:00
prion
prion
Design/Logic Flaw
2017-10-10 01:30:00
debiancve
debiancve
CVE-2017-14603
2017-10-10 01:30:21
openvas
openvas
Debian: Security Advisory (DSA-3990-1)
2017-10-02 00:00:00
Asterisk RTP/RTCP Information Leak Vulnerability (AST-2017-008)
2017-09-20 00:00:00
ubuntucve
ubuntucve
CVE-2017-14603
2017-10-10 00:00:00
nvd
nvd
CVE-2017-14603
2017-10-10 01:30:21
debian
debian
[SECURITY] [DSA 3990-1] asterisk security update
2017-10-03 21:32:33
gentoo
gentoo
Asterisk: Multiple vulnerabilities
2017-10-29 00:00:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
7.5 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
56.8%
Related for CVE-2017-14603