Lucene search

[email protected]CVE-2017-9359

HistoryJun 02, 2017 - 5:29 a.m.

CVE-2017-9359

2017-06-0205:29:00

CWE-125

[email protected]

web.nvd.nist.gov

pjsip

multi-part body parser

remote attackers

denial of service

dos

cve-2017-9359

nvd

security vulnerability

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.1 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

79.7%

JSON

The multi-part body parser in PJSIP, as used in Asterisk Open Source 13.x before 13.15.1 and 14.x before 14.4.1, Certified Asterisk 13.13 before 13.13-cert4, and other products, allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet.

Affected configurations

NVD

Node

digiumopen_sourceMatch13.0.0

digiumopen_sourceMatch13.1.0

digiumopen_sourceMatch13.1.0rc1

digiumopen_sourceMatch13.1.0rc2

digiumopen_sourceMatch13.2.0

digiumopen_sourceMatch13.2.0rc1

digiumopen_sourceMatch13.3.0rc1

digiumopen_sourceMatch13.4.0

digiumopen_sourceMatch13.4.0rc1

digiumopen_sourceMatch13.5.0

digiumopen_sourceMatch13.5.0rc1

digiumopen_sourceMatch13.6.0rc1

digiumopen_sourceMatch13.7.0

digiumopen_sourceMatch13.7.0rc1

digiumopen_sourceMatch13.8.0

digiumopen_sourceMatch13.8.0rc1

digiumopen_sourceMatch13.8.1

digiumopen_sourceMatch13.8.2

digiumopen_sourceMatch13.9.0

digiumopen_sourceMatch13.9.0rc1

digiumopen_sourceMatch13.10.0rc1

digiumopen_sourceMatch13.11.0rc1

digiumopen_sourceMatch13.12.0

digiumopen_sourceMatch13.12.0rc1

digiumopen_sourceMatch13.12.1

digiumopen_sourceMatch13.12.2

digiumopen_sourceMatch13.13.0rc1

digiumopen_sourceMatch13.14.0rc1

digiumopen_sourceMatch13.15.0rc1

digiumopen_sourceMatch14.2.0

digiumopen_sourceMatch14.2.0rc1

digiumopen_sourceMatch14.2.0rc2

Node

digiumcertified_asteriskMatch13.13.0

digiumcertified_asteriskMatch13.13.0cert1

digiumcertified_asteriskMatch13.13.0cert1-rc1

digiumcertified_asteriskMatch13.13.0cert1-rc2

digiumcertified_asteriskMatch13.13.0cert1-rc3

digiumcertified_asteriskMatch13.13.0cert1-rc4

digiumcertified_asteriskMatch13.13.0cert2

digiumcertified_asteriskMatch13.13.0cert3

digiumcertified_asteriskMatch13.13.0rc1

digiumcertified_asteriskMatch13.13.0rc2

CPENameOperatorVersion
digium:open_sourcedigium open sourceeq13.0.0
digium:open_sourcedigium open sourceeq13.1.0
digium:open_sourcedigium open sourceeq13.2.0
digium:open_sourcedigium open sourceeq13.3.0
digium:open_sourcedigium open sourceeq13.4.0
digium:open_sourcedigium open sourceeq13.5.0
digium:open_sourcedigium open sourceeq13.6.0
digium:open_sourcedigium open sourceeq13.7.0
digium:open_sourcedigium open sourceeq13.8.0
digium:open_sourcedigium open sourceeq13.8.1

CPE	Name	Operator	Version
digium:open_source	digium open source	eq	13.0.0
digium:open_source	digium open source	eq	13.1.0
digium:open_source	digium open source	eq	13.2.0
digium:open_source	digium open source	eq	13.3.0
digium:open_source	digium open source	eq	13.4.0
digium:open_source	digium open source	eq	13.5.0
digium:open_source	digium open source	eq	13.6.0
digium:open_source	digium open source	eq	13.7.0
digium:open_source	digium open source	eq	13.8.0
digium:open_source	digium open source	eq	13.8.1