7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
5 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.04 Low
EPSS
Percentile
92.1%
DEPRECATED since this check is already covered in
# SPDX-FileCopyrightText: 2017 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only
if(description)
{
script_oid("1.3.6.1.4.1.25623.1.0.107148");
script_version("2023-06-27T05:05:30+0000");
script_tag(name:"last_modification", value:"2023-06-27 05:05:30 +0000 (Tue, 27 Jun 2023)");
script_tag(name:"creation_date", value:"2017-04-18 10:44:46 +0200 (Tue, 18 Apr 2017)");
script_cve_id("CVE-2016-7551");
script_tag(name:"cvss_base", value:"5.0");
script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:N/C:N/I:N/A:P");
script_tag(name:"severity_vector", value:"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H");
script_tag(name:"severity_origin", value:"NVD");
script_tag(name:"severity_date", value:"2017-04-25 00:39:00 +0000 (Tue, 25 Apr 2017)");
script_tag(name:"qod_type", value:"remote_banner_unreliable");
script_name("Asterisk Open Source and Certified Asterisk RTP Resource Exhaustion Denial of Service Vulnerability");
script_tag(name:"summary", value:"DEPRECATED since this check is already covered in 'Asterisk RTP Resource
Exhaustion Vulnerability' (OID: 1.3.6.1.4.1.25623.1.0.106239)
Asterisk Open Source and Certified Asterisk are prone to a remote denial-of-service vulnerability.");
script_tag(name:"vuldetect", value:"Checks if a vulnerable version is present on the target host.");
script_tag(name:"insight", value:"The overlap dialing feature in chan_sip allows chan_sip to report to
a device that the number that has been dialed is incomplete and more digits are required. If this functionality
is used with a device that has performed username/password authentication RTP resources are leaked. This occurs
because the code fails to release the old RTP resources before allocating new ones in this scenario. If all
resources are used then RTP port exhaustion will occur and no RTP sessions are able to be set up.");
script_tag(name:"impact", value:"An attacker can exploit this issue to cause a denial-of-service condition.");
script_tag(name:"affected", value:"The following products and versions are vulnerable:
Digium Asterisk 13 before 13.11.1
Digium Asterisk 11 before 11.23.1
Digium Certified Asterisk 13 before 13.8-cert3
Digium Certified Asterisk 11 before 11.6-cert1");
script_tag(name:"solution", value:"Updates are available. Please see the references or vendor advisory for more information.");
script_xref(name:"URL", value:"http://www.securityfocus.com/bid/92888");
script_xref(name:"URL", value:"https://downloads.asterisk.org/pub/security/AST-2016-007.html");
script_tag(name:"solution_type", value:"VendorFix");
script_category(ACT_GATHER_INFO);
script_copyright("Copyright (C) 2017 Greenbone AG");
script_family("Denial of Service");
script_tag(name:"deprecated", value: TRUE);
exit(0);
}
exit(66);
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
5 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.04 Low
EPSS
Percentile
92.1%