Lucene search

K
osvGoogleOSV:USN-4814-1
HistoryMar 15, 2021 - 9:49 p.m.

asterisk vulnerabilities

2021-03-1521:49:02
Google
osv.dev
1

7.3 High

AI Score

Confidence

High

0.018 Low

EPSS

Percentile

88.1%

Richard Mudgett discovered that Asterisk did not properly check the length
of input string when setting the user field for PartyB on a CDR. A remote
attacker could use this vulnerability to cause a denial of service (crash)
or potentially execute arbitrary code. (CVE-2017-16671)

Alex Villacis Lasso discovered that Asterisk did not properly check the
length of input string when setting the user field for PartyA on a CDR. A
remote attacker could use this vulnerability to cause a denial of service
(crash) or potentially execute arbitrary code. (CVE-2017-7617)